[SYMBOL] [A] [B] [C] [D] [E] [F] [G] [H] [I] [J] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] [X] [Y] [Z] C programming language      ANSI C compiler for      ANSI standards for      buffer overflows, avoiding      GNU  C shell  [See csh] C, a Reference Manual (Harbison, Samuel P. and Steele, Guy L., Jr.)  C2 audit  cables, network      cutting, as destructive attack      fiber optic      routing of  2nd      tampering detectors for      wiretapping  caching     efficient use of      nameserver, poisoning of  2nd  call forwarding  callback schemes  2nd  Caller-ID (CNID)  2nd  calls, system  [See system calls] capabilities system, Linux  car bombs, as destructive attack  carbon monoxide detectors  case, of usernames  cat command  2nd  3rd  4th  CD-ROM, mounted read-only  CDA (Communications Decency Act)  CDFs (context-dependent files)  ceilings, dropped, access through  cellular phones  Cerf, Vint  CERIAS (Center for Education and Research in Information Assurance and Security) web site  CERT/CC (Computer Emergency Response Team Coordination Center)     contact information for      mailing list for  change detection  [See files, detecting changes to] Chapman, D. Bren (Building Internet Firewalls)  character devices  2nd  chargen service  2nd  3rd  chattr() system call  chdir() system call  2nd  checklists for detecting changes  checksums  2nd  Cheswick, Bill (Firewalls and Internet Security)  chflags() system call  chfn command  2nd  chgrp command  child pornography  child processes  Children's Internet Protection Act  chkey command  chmod command      absolute form      symbolic form  chosen plaintext attacks  chown command  Christiansen, Tom (Programming Perl)  chroot jail  chroot() system call     with anonymous FTP  2nd  3rd      jail() as alternative to      using in programs  chrootuid daemon  chsh command  CIAC web site  CIDR (Classless InterDomain Routing)  2nd  CIFS (Common Internet File System)  [See SMB] ciphertext  2nd  Class A addresses  Class B addresses  Class C addresses  Class D addresses  Class E addresses  classical network addresses  Classless InterDomain Routing (CIDR)  2nd  cleaning personnel  Clear to Send (CTS)  cleartext  client authentication, SSH  client flooding  client-side NFS security  client/server model  clients, NIS  [See NIS] Clipper encryption chip  clock, system     changing      for random seeds      Secure RPC timestamp      synchronizing  clogging (SYN flood attacks)  closelog() system call  clri command  CMW (Compartmented-Mode Workstation) environment  CNID (Caller-ID)  COAST (Computer Operations, Audit, and Security Technology)  code breakers  [See intruders] Code Breakers: The Inside Story of Bletchley Park (Hinsley, F. H. and Stripp, Alan)  codebook attacks  codebooks  2nd  The Codebreakers (Kahn, David)  CodeCenter (Centerline)  collision, message digest values  Combined Log Format  Comer, Douglas E.     (Internetworking with TCP/IP)      Xinu developed by  command shells  [See shells] commands  [See also specific command names]     accounts running single      format used in book      remote execution of      running simultaneously  2nd  [See also multitasking]     trusted computing base (TCB) of  commenting out services  COMMIT function (RPC)  Common Criteria book  Common Internet File System (CIFS)  [See SMB] Common Log Format  Common Object Request Broker Architecture (CORBA)  Communications Decency Act (CDA)  Communications of the ACM  community strings (SNMP)  comparison copies  compartmentalization of system privileges  Compartmented-Mode Workstation (CMW) environment  compliance audits  Compressed SLIP (CSLIP)  Computer Audit Update  computer crime  [See legal issues] Computer Crime: A Crimefighter's Handbook (Icove, David; Seger, Karl; VonStorch, William)  computer criminals  [See intruders] Computer Emergency Response Team Coordination Center  [See CERT/CC] computer equipment  [See hardware] Computer Fraud & Security Update  Computer Law & Security Report  Computer Operations, Audit, and Security Technology (COAST)  Computer Oracle and Password System  [See COPS] Computer Related Risks (Neumann, Peter G.)  computer security  [See security] Computer Security (Gollmann, Dieter)  Computer Security Alert  Computer Security Basics (Russell, Deborah and Gangemi, G. T., Sr.)  Computer Security Buyer's Guide  2nd  Computer Security Handbook (Hunt, A. E.; Bosworth, S.; Hoyt, D. B.)  Computer Security Institute (CSI)  2nd  Computer Security Journal  Computer Security: A Comprehensive Controls Checklist (Wood, Charles Cresson, et al.)  Computer Systems Research Group (CSRG)  computers  [See hardware] Computers & Security  2nd  Computers Under Attack: Intruders, Worms, and Viruses (Denning, Peter J.)  Computrace tracking system  Concurrent Versions System (CVS)  2nd  3rd  confidentiality  2nd  3rd  [See also encryption; integrity]     compared with integrity      compared with security through obscurity      of employee information      Kerberos and      Samba and  configuration files      immutable      logging      nameserver      networks      newsyslog program      paper copies of      protecting      security of      sendmail      Swatch program      syslog facility  connection laundering  connectionless servers (NFS)  connections     hijacking      tracing      unplugging  connectors, network  conserver program  consistency of software  console device  CONSOLE variable  console.perms file  consultants, security  [See vendors, security] contact information  context, for a process  context-dependent files (CDFs)  contingency planning  [See disaster planning] contractors, security  [See vendors, security] control characters     conventions for      in directory names      in filenames      in passwords  2nd      in usernames  conventions used in this book  cookies, magic (Xauthority)  Cooper, Simon (Building Internet Firewalls)  copper network cables, routing of  COPS (Computer Oracle and Password System)  2nd  3rd  copyright     comparison copies violating      disabling controls for      notices in source code and datafiles      unlicensed software and  CORBA (Common Object Request Broker Architecture)  core files  2nd  correctness of data and software  [See consistency of software integrity] cost-benefit analysis  2nd  [See also risks, assessment of]     best practices as alternative to  Count Zero (Gibson, William)  covert channels  cp command  2nd  cpio program  2nd  CPU overload attacks  Crack program  cracklib  crashes, logging  CRC checksums  [See checksums] CREATE function (RPC)  Cred table (NIS+)  crimes, computer-related  [See legal issues] criminal complaints, filing  criminals, as authors of programmed threats  [See also intruders]2nd  Crocker, Steve  cron daemon, system clock and  cron file  2nd  3rd  crontab files  2nd  3rd  4th  crypt encryption program  crypt() system call  2nd  3rd  crypt16 algorithm  cryptanalysis  Cryptfs virtual filesystem  CryptoCard  cryptographic filesystems  2nd  cryptography  2nd  [See also encryption]3rd      applications of      export controls, and      history of      hybrid public/private cryptosystems      message digest functions  2nd      published resources on      Secure RPC implementation  2nd      security checklist for      techniques of  Cryptography and Data Security (Denning, Dorothy E. R.)  Cryptography and Network Security: Principles and Practices (Stallings, William)  csh (C shell)  2nd  [See also shells]     autologout variable      history file      programs using      prompt for  .cshrc file  2nd  3rd  CSI (Computer Security Institute)  2nd  CSLIP (Compressed SLIP)  CSRG (Computer Systems Research Group)  ctime  2nd  3rd  4th  CTS (Clear to Send)  cu command  2nd  3rd  4th  The Cuckoo's Egg (Stoll, Cliff)  current directory  Curry, David  CVS (Concurrent Versions System)  2nd  3rd  Cyberpunk: Outlaws and Hackers on the Computer Frontier (Hafner, Katie and Markoff, John)  Cyrus SASL (Simple Authentication and Security Layer)