UNIX and web security

[modena]

I am currently working a job that requires me to have knowledge of unix and web security issues. I was wondering if anyone knew of an online manual that would help me out learning about either. Thanks in advance!!

[Cubsfan]

Which flavor of Unix?

[modena]

I guess i will have to ask that, I am working for the Dept. of Defense, so if you know of anything general in the mean time, i will let ya know the flavor tommorrow.

[Jeffbx]

You should go get this book:

"Protect your Windows Network from Perimeter to Data" (http://www.amazon.com/exec/obidos/tg/detail/-/0321336437/qid=1119440870/sr=8-1/ref=pd_csp_1/102-4528989-7627366?v=glance&s=books&n=507846)

Yes, it's specific to Windows, but most of the security information in the book applies to any OS. I went to a presentation this guy gave where he broke into a network by going through a web server, into the database server, through the DMZ AND the internal firewall & then finally into the internal network. Took him about 20 minutes.

[modena]

Cool, the flavor of UNIX is Sun. So if you have any info on that I would appreciate it.

[Jeffbx]

Here's some Sun specific stuff to get you started:

http://java.sun.com/webservices/docs/1.2/tutorial/doc/
http://java.sun.com/security/
http://www.softwarespectrum.com/intouch/edition32/articles.asp?subsection=Sun

[modena]

thanks for all the help so far guys, anything else you can throw my way would be great!!!