Internet & TCP/IP Network Security

The heart of this somewhat dry book is a step-by-step guide to implementing a secure Unix network. The book defines each security issue and follows with instructions on what parameters to set, what programs to run, and which files to check. This is useful but doesn't convey much high-level knowledge in the process. You could set up a whole system according to these directions and still not really understand why or how it all works. Whether you will benefit from this cookbook approach depends on your desire to explore every last corner of Unix.

After covering system configuration, the book goes on to discuss several noncommercial and commercial security programs that help you analyze your network for weaknesses. Appendices introduce related topics such as the HotJava browser, the Java and JavaScript languages, the Kerberos authentication scheme, and PGP. Some of this material seems out-of-date, such as the discussion of HotJava and the fact that neither Microsoft's Windows NT nor Internet Explorer is mentioned. If the authors had left out this weaker Internet material and called this book "Securing your Unix network," it would be a solid title.