[SYMBOL]
[A]
[B]
[C]
[D]
[E]
[F]
[G]
[H]
[I]
[J]
[K]
[L]
[M]
[N]
[O]
[P]
[Q]
[R]
[S]
[T]
[U]
[V]
[W]
[X]
[Z]
abort( )
2nd
access control
address-based vs. authentication
restricting based on hostname, IP address
Unix
Windows
access control entries (ACEs)
2nd
access control files
IP address or hostname lists
rules
access( )
accessing file information securely
ACEs (access control entries)
2nd
ACLs (access control lists)
2nd
3rd
AdjustTokenPrivileges( )
2nd
Advanced Encryption Standard
[See AES]
advisory locks
AES (Advanced Encryption Standard)
2nd
Brian GladmanÕs version
CBC mode in OpenSSL
key length
OMAC and
security at 128-bits
supported key sizes
anonymous pipes
anti-debugger code
anti-tampering
assembly language code examples
software protection
[See software protection]
arbitrary-precision libraries
ASCII
base64 mapping to
hexadecimal data, conversion into binary
random strings, getting
ASN.1 language
asprintf( )
assembly language
code examples
Intel and AT&T syntax
AssignProcessToJobObject( )
Athlon XP, counting clock cycles on
attacks
active vs. eavesdropping
against one-way constructs
birthday attacks
preventing
blinding attacks, preventing
capture replay attacks, preventing
collision attacks
cross-site scripting attacks
dictionary attacks
RSA and
double-encoding attacks
format-string attacks, preventing
length extension attacks
2nd
preventing
man-in-the-middle attacks
2nd
3rd
4th
preventing
methods targeting authentication
on entropy sources
replay attacks, prevention
rollback attacks
2nd
shatter attacks, protecting Windows from
SQL injection attacks
stack-smashing attacks
surreptitious forwarding attacks
timing attacks
audit logging
log entries, signing and encrypting
logging to CD-R
MACs for detection of log file manipulation
network logging
VPNs (virtual private networks)
authenticate-and-encrypt paradigm
authenticated secure channels, building without SSL
authentication
attacks against, preparing for
authentication factors
common technologies
cookies, using
delays after failed attempts
DSA and Diffie-Hellman
Kerberos, using
and key exchange using RSA
mechanisms, requirements for
methods, choosing
minimizing risk when done with no PKI
number of failed attempts
password-based using PBKDF2
password-based with MD5-MCF
securing against rollback attacks
throttling failed attempts
Unix domain sockets, using
via PAM API
without third-party
Avaya Labs LibSafe
AX_compute_credentials( )
AX_connect( )
AX_CRED_deserialize( )
AX_CRED_serialize( )
AX_exchange( )
AX_get_credentials_callback( )
AX_get_salt( )
AX_set_salt( )
AX_srv_accept( )
AX_srv_exchange( )
AX_srv_listen( )
|