Foreword by Lars Knudsen Practical Intranet Security focuses on the various ways in which an intranet can be violated and gives a thorough review of the technologies that can be used by an organization to secure its intranet. This includes, for example, the new security architecture SESAME, which builds on the Kerberos authentication system, adding to it both public-key technology and a role-based access control service. Other technologies are also included such as a description of how to program with the GSS-API, and modern security technologies such as PGP, S/MIME, SSH, SSL IPSEC and CDSA. The book concludes with a comparison of the technologies. This book is different from other network security books in that its aim is to identify how to secure an organization's intranet. Previously books have concentrated on the Internet, often neglecting issues relating to securing intranets. However the potential risk to business and the ease by which intranets can be violated is often far greater than via the Internet. The aim is that network administrators and managers can get the information that they require to make informed choices on strategy and solutions for securing their own intranets. The book is an invaluable reference for network managers and network administrators whose responsibility it is to ensure the security of an organization's intranet. The book also contains background reading on networking, network security and cryptography which makes it an excellent research reference and undergraduate/postgraduate text book.

This volume provides hands-on methodology for designing effective network-level security systems for your corporate intranet or extranet. Using real-world examples and referencing intranet and extranet technology, this guidebook for IT professionals shows how to configure network and security elements such as routers, switches, servers and firewalls to achieve top-notch security. Components of effective security are critically reviewed in detail, including different types of firewalls, such as Packet Filters, Stateful and Application level proxy devices, and encryption schemes, such as DES, RSA, and IPSEC. Secure data transport and data access are also discussed, as well as the use of remote intelligent agents on network devices and servers. The book discusses how to evaluate security options based on requirements such as cost, complexity, and performance, and network and service management issues. It seeks to close the gap between theory and implementation by featuring detailed case studies and an interactive approach with diagrams and configurations.

An intranet can be a powerful tool. A well-designed intranet becomes the key resource and communications platform for your organization, used by members of staff as their first destination for information. In contrast, a poorly designed intranet will sit unused, accumulating useless information, and eating up IT budgets. So, how do you avoid this situation, and make sure you design the most useful, and usable, intranet? This book takes you through the steps you need to take to make an invaluable intranet, from identifying your users' needs and building an indispensable tool, to marketing the results. It guides you through the problems that may occur, passing on invaluable advice from people who have been through the process before. We start by setting the scene, giving an overview of what intranets are and how to justify it to your organization. We then give you a rundown of the main areas you'll need to think about when developing an intranet, covering browsers, development techniques, usability, content management, security, and internal marketing. Finally, we'll take a look at what to do when the Intranet moves beyond its original function, looking at remote access, extranets, and what to do when the Intranet gets too big.

Supported by global case studies highlighting good practice, and from the results of a survey of Top UK Corporate Intranet developers and consultants, this book addresses practical business concerns and technical issues. It includes advice and commentary received first-hand from professionals experienced in their deployment, operational management and continuing development.

On computer security

In the last 12 years we have observed amazing growth of electronic communication. From typical local networks through countrywide systems and business-based distributed processing, we have witnessed widespread implementation of computer-controlled transmissions encompassing almost every aspect of our business and private lives.Internet and Intranet Security, Management, Risks and Solutions addresses issues of information security from the managerial, global point of view. The global approach allows us to concentrate on issues that could be influenced by activities happening on opposite sides of the globe.

This pioneering guide to Internet and intranet security is the first to cover all of the relevant technologies in one comprehensive reference, and enhances the ability to create and deploy secure architectures. It gives users the knowledge needed for improved productivity, whether setting up commerce on line, assembling a firewall, or selecting access controls and cryptographic protocols to secure TCP/IP-based networks.