Problem - Kevin Tafuro

attacks (continued)
capture replay attacks, preventing, 303
collision attacks, 251
cross-site scripting attacks, 103
dictionary attacks, 133
RSA and, 335
double-encoding attacks, 100
format-string attacks, preventing, 75–78
length extension attacks, 252
preventing, 269
man-in-the-middle attacks, 161, 310,
432, 503
preventing, 436
methods targeting authentication, 365
on entropy sources, 622
replay attacks, prevention, 134
rollback attacks, 161, 492
shatter attacks, protecting Windows
from, 716
SQL injection attacks, 107–110
stack-smashing attacks, 79
surreptitious forwarding attacks, 343
timing attacks, 337
audit logging, 734–737
log entries, signing and encrypting, 736
logging to CD-R, 736
MACs for detection of log file
manipulation, 737
network logging, 734
VPNs (virtual private networks), 735
authenticate-and-encrypt paradigm, 299
authenticated secure channels, building
without SSL, 491–501
authentication, 362–372
attacks against, preparing for, 365
authentication factors, 363
common technologies, 367–372
cookies, using, 419–421
delays after failed attempts, 398
DSA and Diffie-Hellman, 436
Kerberos, using, 414–418
and key exchange using RSA, 429–431
mechanisms, requirements for, 364–367
methods, choosing, 362–372
minimizing risk when done with no
PKI, 438–444
number of failed attempts, 398
password-based using PBKDF2, 408–411
password-based with
MD5-MCF, 402–408
securing against rollback attacks, 492
throttling failed attempts, 398–400
740 | Index
Unix domain sockets, using, 482–485
via PAM API, 411–414
without third-party, 438–444
Avaya Labs LibSafe, 83
AX_compute_credentials( ), 423
AX_connect( ), 427
AX_CRED_deserialize( ), 424
AX_CRED_serialize( ), 424
AX_exchange( ), 428
AX_get_credentials_callback( ), 424
AX_get_salt( ), 424
AX_set_salt( ), 428
AX_srv_accept( ), 426
AX_srv_exchange( ), 426
AX_srv_listen( ), 425
This is the Title of the Book, eMatter Edition
Copyright © 2007 O’Reilly & Associates, Inc. All rights reserved.
B
Balabit IT Security LTD, 735
base64
decoding, 125
public interface to code example, 128
encoding, 123–125
characters in output, 123
public interface to code example, 125
base64 encoding, 123–125
basic data validation techniques, 71–75
Berkeley socket interface for TCP/IP, 477
Bernstein, Dan, 82, 250, 287
big numbers, integer-based math and, 315
big-endian vs. little-endian storage, 118
BIGNUM library (OpenSSL), 315–323
precomputation of key values, 328
BIGNUM objects
assigning random values, 317–319
assignment of numerical values, 316
binary numbers, representing as, 319
common tests on, 320
initialization, 315
malloc( ) and, 316
math operations supported on, 321
outputting, 319
BIGNUM_clear_free( ), 316
binary data, representing as English text, 128
binary keys, conversion from text, 130
binary strings, conversion
from integers for use with RSA, 331
to integers for use with RSA, 330
BIO filters, 456
BIO objects, 456
BIO_free_all( ), 457
BIO_new_mem_buf( ), 554
BIO_read( ), 457