Prevention

To recover from an breach in network/computer security is a lot more expensive than setting up the necessary prevention. What follows are resources to help system owners protect their systems from being breached:

• SANS Top 20: The SANS Top 20 Internet Security Vulnerabilities - what they are and how to protect against.
• Securing Unix: documentation published jointly by the Australian Computer Emergency Response Team (AusCERT) and the CERT® Coordination Center (CERT/CC) and details steps to improve the security of UNIX Operating Systems.
• Macintosh Security: a site devoted to Apple Macintosh security and Mac OS X Security.
• Windows Security: in-depth information and deployment procedures for Windows-based security, including security management using the Microsoft Security Configuration Tool Set, support for IP Security, the Encrypting File System, Public Key Infrastructure, smart cards, and Kerberos.
• Microsoft Windows Update: Windows Update is the online extension of Windows that helps you to keep your computer up-to-date.
• Microsoft Office Update: the Office Product Updates site is the online extension of Office that helps you keep your Office products up-to-date.
• Windows 2000 Hardening Guide: a Microsoft published document that provides administrator guidance for how to set up and configure secure Windows 2000 systems in several scenarios. This document is a baseline for other hardening guides published by Microsoft.
• Windows NT Configuration Guidelines: documentation published jointly by the CERT Coordination Center and AusCERT (Australian Computer Emergency Response Team) and details common Microsoft Windows NT 4.0 configuration problems that have been exploited by intruders and recommends practices for deterring several types of break-ins.
• Windows NT Security and Configuration Resources: documentation published jointly by the CERT Coordination Center and AusCERT (Australian Computer Emergency Response Team).
• Securing IIS: a Microsoft published document that lists some recommendations and best practices to secure a server on the Web running Microsoft Windows 2000 and Internet Information Services (IIS) 5.