# 95-04


Contents


        NIST Special Pub 800-10
        UTR on the Slide
        Yet Another Firewalls Article
        DOE Conference in Milwaukee - 414 Reunion?
        SATAN - Paradise Lost or Gained for the Cyberage Milton?


1.  John Wack and Lisa Carnahan from NIST have once again published a
common sense, readable document, NIST Special Publication 800-10,
"Keeping Your Site Comfortably Secure:  An Introduction to Internet
Firewalls".  If you need a basic foundation upon which to intelligently
discuss firewalls, this is the source.

2.  The second edition of Mark Ludwig's "Underground Technology Review"
arrived this week.  UTR replaced the Computer Virus Development Quarterly
which had earlier generated strong comments, particularly on its distribution
of viral code and compiled viruses.  The information content of UTR continues
to be disappointing and somewhat strange.  Articles range from discussion
of the "Yellow Worm" virus to a "London Sunday Telegraph" article on militias
in America.  Did I use the word "strange"?  I think I should have said "weird".

3.  The March/April 1995 edition of "Sys Admin" has an article by Chris Hare
entitled "Network Construction:  Using a Firewall".  The author has a book
on the subject soon to be released.

4.  The 17th DOE Computer Security Group Training Conference will occur
in Milwaukee, Wisconsin from May 1-4, 1995.  There is no conference fee, and
non-DOE professionals are welcome subject to availability.  This year the
conference returns to a two track format, vice three tried at the 16th.  One
can obtain details from kelly.flynn@hq.doe.gov.

5.  If you have an interest in the impending release of SATAN, two postings
to the Firewalls Forum indicate the authors have already distributed the
documentation for SATAN on ftp.win.tue.nl in the path /pub/security/satan.tar.
Z.  If you do not know what SATAN is, then you have even more reason to
retrieve the documentation.


[Disclaimer:  Information Systems Security Updates represent the
opinions and views of the author, not his employer.  Recipients
are free to quote all/parts of the ISSU with credit/blame to the
author.]