Security Tools

This web site contains information primarily for U of M Information Technology staff.  For students, faculty and other staff see Safe Computing and 1-HELP.

Contents:

• By Operating System - Macintosh, Novell, Unix, Windows
• General Tools
• Other Links

  ---

By Operating System - Macintosh, Novell, Unix, Windows

Macintosh

• AntiVirus Software
• • Symantec Norton AntiVirus - Free! - See OIT Virus, AntiVirus and Firewall page for more information.
• Assured Delete/Destroy Data
• Data Encryption
• Software Firewalls
• • Symantec Norton Personal Firewall
  • IPNetSentry
  • DoorStop from Open Door Networks
  • NetBarrier from Intego
• Stunnel
• SSH Secure Shell
• Vulnerability Testing
• • Request an ISS vulnerability scan

Novell Netware

• AntiVirus Software
• • Symantec Norton AntiVirus - Free! - See OIT Virus, AntiVirus and Firewall page for more information.
• Vulnerability Testing
• • Request an ISS vulnerability scan

Unix

• Assured Delete/Destroy Data
• Data Encryption
• Filtering and anti-virus
• • Procmail
  • Unix Mail Security-Anti-virus (PDF file) - Scott Dier, U of M Computer Science and Engineering
• Firewalls
• • Fwctl from iNsu Innovations, Inc
  • How to set up filtering & proxy firewall - The Linux Documentation Project
  • How to configure ip and ipnat for OpenBSD - OpenBSD
  • IPFilter
  • OpenBSD Packet Filter
• SSH Secure Shell
• Vulnerability Testing
• • Request an ISS vulnerability scan
• NcFTPd Server - Recommended as a replacement for FTP server on UNIX like operating systems, especially Linux
• Bastille Linux
• YASSP (Yet another Solaris Security Package)
• Weitse Venema's TCP Wrappers
• Stunnel
• Swatch
• Logsurfer
• Tripwire Security Systems
• Crack
• John the Ripper
• Chkrootkit - Locally checks for signs of a rootkit

Windows

General Windows

• AntiVirus Software
• • Symantec Norton AntiVirus - Free! - See OIT Virus, AntiVirus and Firewall page for more information.
• Assured Delete/Destroy Data
• Data Encryption
• Software Firewalls
• • Symantec Norton Personal Firewall - Free! - See OIT Virus, AntiVirus and Firewall page for more information.
  • ZoneAlarm from Check Point
  • Black ICE from ISS
    
• SSH Secure Shell
• Remote Access
• • Remote Management- 3 Secure Solutions (Security Focus)
• Patching
• • Secunia
  • Windows Offline Update See Installing Windows Update without an internet connection for more details.
• Spyware Removal Utilities
• • Adaware
  • Spybot Search and Destroy
  • Spyware/Adware - Educause
• Vulnerability Testing
• • Request an ISS vulnerability scan
• Tripwire Security Systems
• Stunnel
• L0phtCrack
• Presentations
• • Securely Using HFNetChk & MS Baseline Security Advisor
  • Disable Support for LanMan and Null Sessions (PDF File)
  • Microsoft IP Filtering
  • • Microsoft IP Filtering (PDF file) - Eric Nordin, U of M
    • Sample IP Filters
    • Windows IPSec Filters For "Not-So Dummies" (PDF file) - Brian Eckman, U of M
    • FileMaker IP Filters
    • MS Filtering Getting Started
  • Safe(r) WinVNC (PDF file) - Eric Nordin, U of M
  • Setting up Cygwin SSHD (PDF file) - Joel Anderson, U of M
  • SSH/VNC for Remote Windows Access (PDF file) - Joel Anderson, U of M
  • Auditing WinNT/2000 (PDF file) - Eric Nordin, U of M
  • Performance NT/2000 Monitor (PDF file) - Eric Nordin, U of M
  • Windows Rootkits (PDF file) - Brian Eckman, U of M
• Microsoft Tools
• • QChain.exe to Install Multiple Hotfixes with Only One Reboot
  • Microsoft Baseline Security Analyzer
  • IIS Lockdown Tool
  • List of Security Tools
  • Security Checklists

Windows XP/2000

• Qfecheck.exe Verifies the Installation of Windows 2K Hotfixes - Microsoft
• QuickStart Security Settings Wizards - U of M Minimum Security Settings

→Presentations

General Tools

Authentication

• U of M Central Authentication Hub (CAH) - U of M
• X.500 Logins at the Desktop (PDF file) - Jeff Williams, CALA Computing Center
• M Key (Two-factor authentication) - U of M
• SSL certificates for Thawte - Chris Bongaarts, U of M Anyone considering purchase of SSL certificates for web (HTTPS), development (authenticode, java code signing, etc.) or other (stunnel) use should probably take a look here if you're planning to get cheap certs through U of M OIT.

Desktop/Laptops

• VPN-Secure Connection Tool
• Assured Delete/Destroy Data
• Encrypting Stored Data

Firewall Links

→Presentations

Intrusion Detection

• SNORT - Lightweight Intrusion Detection

Other Links

• Did You Know...?
• SANS/FBI Top Twenty Vulnerabilities - SANS Institute & FBI
• Top 100 Security Tools - Insecure.org
• Stunnel Presentation (PDF file) - Paul Dokas, U of M This presentation provides information on installing and configuring the Stunnel program, which allows you to encrypt arbitrary TCP connections inside SSL.
• Network Filters (Blocked Ports)

For other security resources, see the OIT Resources web page.