About this product: A comprehensive and practical guide to PAM for Linux: how modules work and how to implement them
Understand and configure PAM
Develop PAM-aware applications and your own PAMs using the API and C
How to authenticate users in Active Directory, mount encrypted home directories, load SSH keys automatically, and restrict web and rsh services
In Detail
PAM-aware applications reduce the complexity of authentication. With PAM you can use the same user database for every login process. PAM also supports different authentication processes as required. Moreover, PAM is a well-defined API, and PAM-aware applications will not break if you change the underlying authentication configuration.
The PAM framework is widely used by most Linux distributions for authentication purposes. Originating from Solaris 2.6 ten years ago, PAM is used today by most proprietary and free UNIX operating systems including GNU/Linux, FreeBSD, and Solaris, following both the design concept and the practical details. PAM is thus a unifying technology for authentication mechanisms in UNIX.
PAM is a modular and flexible authentication management layer that sits between Linux applications and the native underlying authentication system. PAM can be implemented with various applications without having to recompile the applications to specifically support PAM.
What you will learn from this book?
Using PAM services for authentication in applications
Using PAM modules common to various operating systems (pam_mkhomedir, pam_mount, pam_succeed_if, pam_nologin, pam_wheel, pam_access, pam_deny, pam_unix, pam_winbind, pam_ldap, pam_mysql)
Testing and debugging your PAM configuration
Using PAM and Winbind for integrating any Linux/UNIX computer with Microsoft Active Directory
Developing your own PAM module in C
Approach
This book provides a practical approach to UNIX/Linux authentication. The design principles are explained thoroughly, then illustrated through the examination of popular modules. It is intended as a one-stop introduction and reference to PAM.
Who this book is written for?
This book is for experienced system administrators and developers working with multiple Linux/UNIX servers or with both UNIX and Windows servers. It assumes a good level of admin knowledge, and that developers are competent in C development on UNIX-based systems.
About this product: Palmprint Authentication is the first book to provide a comprehensive introduction to palmprint technologies. It reveals automatic biometric techniques for personal identification using palmprint, from the approach based on offline palmprint images, to the current state-of-the-art algorithm using online palmprint images. Palmprint Authentication provides the reader with a basic concept of Palmprint Authentication. It also includes an in-depth discussion of Palmprint Authentication technologies, a detailed description of Palmprint Authentication systems, and an up-to-date coverage of how these issues are developed. This book is suitable for different levels of readers: those who want to learn more about palmprint technology, and those who wish to understand, participate, and/or develop a palmprint authentication system. Palmprint Authentication is effectively a handbook for biometric research and development. Graduate students and researchers in computer science, electrical engineering, systems science, and information technology will all find it uniquely useful, not only as a reference book, but also as a text book. Researchers and practitioners in industry, and R&D laboratories working in the fields of security system design, biometrics, immigration, law enforcement, control, and pattern recognition will also benefit from this volume.
Will the rare autographed baseball your great-uncle gave you put your children through college? Is your grandmother's chest of drawers really a seventeenth-century antique, or merely a reproduction? A leader in forgery detection and forensic investigation, Joe Nickell reveals his secrets to detecting artifacts items in Real or Fake: Studies in Authentication. Detailing how the pros determine whether an Abraham Lincoln signature is forged or if a photograph of Emily Dickinson is genuine, Nickell provides the essential tools necessary to identify counterfeits. In this general introduction to the principles of authentication, Nickell provides readers with step-by-step explanations of the science used to detect falsified documents, photographs, and other objects. Illustrating methods used on hit shows such as Antiques Roadshow and History Detectives, Nickell recommends that aspiring investigators employ a comprehensive approach to identifying imitations. One should consider the object's provenance (the origin or derivation of an artifact), content (clues in the scene or item depicted), and material composition (what artifacts are made of), as well as the results of scientific analyses, including radiographic, spectroscopic, microscopic, and microchemical tests. Including fascinating cases drawn from Nickell's illustrious career, Real or Fake combines historical and scientific investigations to reveal reproductions and genuine objects. Nickell explains the warning signs of forgery, such as patching and unnatural pen lifts; chronicles the evolution of writing instruments, inks, and papers; shows readers how to date photographs, papers, and other materials; and traces the development of photographic processes since the mid-nineteenth century. Lavishly illustrated with examples of replicas and authentic objects inspected by Nickell, Real or Fake includes case studies of alleged artifacts including Jack the Ripper's diary, a draft of the Gettysburg Address, notes by Charles Dickens, Jefferson Davis's musket, and debris from the Titanic.
About this product: One of the key problems of computer security is that of guaranteeing that an entity (person or system) really is who he, she, or it claims to be. Authentication procedures may be very trusting (as for "guest" accounts with limited capability), moderately strong (your bank requires both a physical card and a PIN before it will dispense money from an ATM), or nearly foolproof (biometric devices, which examine--to cite two examples--retina scans or fingerprints). Authentication: From Passwords to Public Keys examines the whole range of authentication options and offers advice on which one might be right for your security requirements, budget, and tolerance for user inconvenience. As the "public keys" part of the title implies, this book also deals with some aspects of encryption.
Rather than present a menagerie of security techniques and explain their strengths and weaknesses in an academic way, Richard Smith demonstrates the strength of protection mechanisms in the only way that counts--he shows how they can be defeated, and at what expenditure of effort. He's also made lists of attacks, complete with assessments of the popularity of each and the particular risk it poses, and a similar list of defenses. Margin notes refer to list entries by number, so it's easy to see what problems and solutions are covered in a given passage of text--though there's no index of references to attacks and defenses by number. --David Wall
Topics covered: How to defend computer systems, primarily through the application of identity-verification techniques. Those covered include passwords (including the randomly generated kind, and their hashes), authentication by machine address, biometric examination, smart cards, and RSA public-key cryptography.
About this product: User identification and authentication are essential parts of information security. Users must authenticate as they access their computer systems at work or at home every day. Yet do users understand how and why they are actually being authenticated, the security level of the authentication mechanism that they are using, and the potential impacts of selecting one authentication mechanism or another?
Introducing key concepts, Mechanics of User Identification and Authentication: Fundamentals of Identity Management outlines the process of controlled access to resources through authentication, authorization, and accounting in an in-depth, yet accessible manner. It examines today's security landscape and the specific threats to user authentication. The book then outlines the process of controlled access to resources and discusses the types of user credentials that can be presented as proof of identity prior to accessing a computer system. It also contains an overview on cryptography that includes the essential approaches and terms required for understanding how user authentication works.
This book provides specific information on the user authentication process for both UNIX and Windows. Addressing more advanced applications and services, the author presents common security models such as GSSAPI and discusses authentication architecture. Each method is illustrated with a specific authentication scenario.
About this product: Protocols for authentication and key establishment are the foundation for security of communications. The range and diversity of these protocols is immense, while the properties and vulnerabilities of different protocols can vary greatly. This is the first comprehensive and integrated treatment of these protocols. It allows researchers and practitioners to quickly access a protocol for their needs and become aware of existing protocols which have been broken in the literature. As well as a clear and uniform presentation of the protocols this book includes a description of all the main attack types and classifies most protocols in terms of their properties and resource requirements. It also includes tutorial material suitable for graduate students.
About this product: This 2009 desktop reference is completely up-to-date with the most current consular legalization requirements. Whether dealing with a power of attorney, trademark registration, certificate of origin, or other documents, the user will find explanations of legalization procedures for 219 foreign jurisdictions and all 50 US states, plus territories. Each entry includes: - Complete consular and Secretary of State contact information - address, phone, fax, and hours of business - Prior authorization and signature requirements - Documents to be submitted - Turn around time - Fees and payment methods For this NEW 2009 edition, Sinnott has written two new prefatory items: -A new "how to" guide divided into three categories of reader-specific guidance, for: (a.) Legal practitioners in the U.S., (b.) Court clerks and county clerks in the U.S., and (c.) Lawyers and patent agents in non-U.S. jurisdictions. -A new Introduction that provides updated information on the changing law of document authentication, including such dramatic developments as the WTO's removal of many of the remaining impediments to transnational legal practice.
About this product: This is the second edition of the widely acclaimed book that redefined how to build databases that protect the user's information. Instead of trying to store sensitive data in a tightly guarded box, the book describes simpler, faster and more secure solutions that leave the user in control of personal information. The trick to building a translucent database is scrambling the personal information in a way that only the right person can recover it. The book describes how traditional and not-so-traditional techniques can create a database that can answer questions for the right person without holding any useful information that might be abused by an insider or an attacker who manages to slip inside the fold. The second edition includes updated versions of the original material and four new chapters that tackle problems like secure and anonymous voting. All of the chapters include detailed descriptions of the algorithms and many descriptions include working code.
About this product: If you collect team baseballs, this is the reference book you will want to own. However be aware it only covers up to 1991. It is a great source of who the key players by year and team. It also lists all-star teams and key players. It does, however need to be updated to reflect current values, players and teams after 1991.
BOOK
