M3   UNIX Security Tools: Use and Comparison
Matt Bishop, University of California, Davis

Who should attend: UNIX System, Network, and Security Administrators who need to better understand the various security tools currently available.

The goal of this course is to assist UNIX security administrators, and other interested users, in locating and using publicly available programs to improve the security of their system. This course will compare the uses and drawbacks of several different programs, with an emphasis on when to use which.

Topics include:

	Tool checking and analysis: what to look for, how to analyze a tool, checking downloaded tools for security problems
	Static analysis tools: file system auditing tiger, COPS)
	Network analysis and security tools: monitors (nfsbug, nfswatch), ISS, SATAN, Gabriel, Courtney
	Tools for privilege: managing shells (lsu)
	Tools for logging and log analysis tools (swatch, logcheck)
	Libraries (msystem, trustfile)
	Tools for authentication: proactive password changers (shadow, crack)