Slashdot Mirror

← Back to Stories (view on slashdot.org)

Secure Your Network NSA-style

Posted by timothy on from the good-idea dept.

farker haiku writes "The NSA has unclassified a pdf on how to secure your network in sixty minutes. All in all, it's an interesting and informative read if you are in the security biz. The article covers a variety of topics such as Buffer Overflows, Intrusion Detection Systems and using Tripwire ASR to ensure the integrity of your network server."

5 of 42 comments (clear)

  1. Classified information? by TripMaster+Monkey · · Score: 3, Insightful



    The NSA has unclassified a pdf on how to secure your network in sixty minutes.

    This was classified? All the information in this document has been freely available on the Web for quite some time now...

    I'm still gonna print this up and put it on my shelf...the NSA logo on the front looks pretty impressive. ^_^

    --
    ____

    ~ |rip/\/\aster /\/\onkey

    1. Re:Classified information? by ralphus · · Score: 3, Informative

      Yes it was classified. It was classified with the unclassified classification. It was not declassified.

      --
      Revolutions are never about freedom or justice. They're about who's going to be top dog. -- Kilgore Trout
  2. Faster than 60 minutes.... by Mad_Rain · · Score: 3, Insightful

    What about the "Under 60 seconds method for securing your computer" ?

    Step 1. Unplug it.

    Ta-daaaa! Secure at last. ;)

    --
    "What do you think?" "I think 'What, do you think?!'"
  3. NSA: Purely Professional by ndansmith · · Score: 3, Funny
    From the document (page 3): These updates where to fixes grammar and syntax

    I don't think they finished the job.

  4. Re:confused by CDarklock · · Score: 3, Informative

    The LAN Manager hash algorithm splits a password of up to 14 characters into two blocks of 7 characters, the second block null-padded to size. The LM hash values for single- and dual-character second blocks are well known, so an eight- or nine-character password on Windows using the LM hash is effectively a seven-character password.

    This assumes you have some systems which can ONLY use the LM hash. Systems with later capabilities can be forced NEVER to use LM hashing by simply using a 15-character password or longer, which won't fit in an LM hash even if it is enabled (which it shouldn't be these days, *unless* you have legacy systems that require it).

    --
    Microsoft cheerleader, blue flag waving, you got a problem with that?