Lance's Security Papers
Now released, the only book dedicated to honeypots!
Honeypots: Tracking Hackers.

--- Whitepapers ---
Feel free to copy / link / distribute any of the whitepapers listed below.
-
Armoring
Solaris: II - 20 July, 2002
This article is a continuation of the Armoring Solaris paper. This article focuses on
securily building a minimized Solaris 8 64-bit system specifically for CheckPoint FireWall-1
NG.
-
Intrusion
Detection for Check Point FireWall-1
- 22 December, 2001
How to implement intrusion detection for Checkpoint
Firewall 1. Also included is a downloadble script that does all IDS
functionality for you, for both Firewall-1 ver 4.1 and the latest, FW-1 NG
(Next Generation). Please give this page a minute to download, I used
several images for the page, totaling 225K. Thanks!
-
Understanding
the FireWall-1 State Table - 29 November, 2000
Stateful inspection is one of FW-1's claim
to fame. This whitepaper covers how it works, and how stateful it really
is. Included is a PERL script that helps you read and understand
your own FW-1 state table. This paper is a work in progress.
-
Building
Your Firewall Rulebase - 26 January, 2000
Misconfigured firewalls are one of the biggest
risks security admins face. This paper describes in a step-by-step fasion
how to build a secure firewall rulebase.
-
Auditing
Your Firewall Setup - 12 December, 2000
How to audit your firewall setup. The
purpose of this paper is to help you verify your firewall is correctly
implemented and behaves as you expect it.
Author's
bio
Lance Spitzner enjoys learning by blowing up his Unix systems at
home. Before this, he was in the Army where he blew up things of a different
nature. You can reach him at lance@honeynet.org