Foundations of computer security

Foundations of Computer Security

Volumn , Issue , 2006, Pages 1-368

  Salomon, David ^a  

^a CALIFORNIA STATE UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

EID: 84892195269     PISSN: None     EISSN: None     Source Type: Book    
DOI: 10.1007/1-84628-341-8     Document Type: Book

References (313)

1. 3M (2004) is http://cms.3m.com/cms/US/en/2-68/iclcrFR/view.jhtml.
2. absolute (2005) is URL http://www.absolute.com/public/main/.
3. ACA (2005) is URL http://www.und.nodak.edu/org/crypto/crypto/.
4. Aegean Park Press (2001) is URL http://www.aegeanparkpress.com/.
5. AFAC (2005) is URL http://www-vips.icn.gov.ru/.
6. Agrawal, Rakesh, and Ramakrishnan Sirkant (2004) "Privacy-Preserving Data Mining," available from http://www.almaden.ibm.com/software/quest/ Publications/papers/sigmod00privacy.pdf.
7. Akamai (2004) is www.akamai.com.
8. Amiga (2004) is URL http://www.amiga.org/.
9. Anderson, Ross, Roger Needham, and Adi Shamir (1998) "The Steganographic File"
10. System," in David Aucsmith (ed.) Proceedings of the Second Information Hiding Workshop, IWIH, pp. 73-82, April. Also available from URL http://citeseer.nj.nec.com/anderson98steganographic.html.
11. anonymizer (2005) is URL www.anonymizer.com.
12. APWG (2004) is http://www.antiphishing.org/.
13. arin (2004) is http://www.arin.net/whois/.
14. Arnold, Michael, Martin Schmucker, and Stephen D. Wolthusen (2003) Techniques and Applications of Digital Watermarking and Content Protection, Boston, Artech House.
15. Asonov, Dmitri and Rakesh Agrawal (2004) "Keyboard Acoustic Emanations," IEEE Symposium on Security and Privacy, Oakland, California, pp. 3-11, May. Available at http://www.almaden.ibm.com/software/quest/ Publications/papers/ssp04.pdf.
16. attrition (2004) is URL http://www.attrition.org/.
17. attrition-mirror (2005) is URL http://www.attrition.org/mirror/attrition/ .
18. Aura, Tuomas (1996) "Practical Invisibility in Digital Communication," in Proceedings of the Workshop on Information Hiding, Cambridge, England, May 1996, pp. 265-278
19. Lecture Notes in Computer Science 1174, New York, Springer Verlag. Also available from URL http://www.tcs.hut.fi/Personnel/tuomas.html.
20. avenger (2005) is http://www.research.ibm.com/antivirus/SciPapers/Gordon/ Avenger.html.
21. badguys (2005) is URL http://www.badguys.org/.
22. Bamford, James (2002) Body of Secrets: Anatomy of the Ultra-Secret National Security Agency, New York, Anchor books (Random House).
23. Barker, Wayne G. (1984) Cryptanalysis of Shift-Register Generated Stream Cipher Systems, Laguna Hills, Calif., Aegean Park Press, vol. C-39.
24. Barker, Wayne G. (1989) Introduction to the Analysis of the Data Encryption Standard (DES), Laguna Hills, Calif., Aegean Park Press, vol. C-55.
25. Barker, Wayne G. (1992) Cryptanalysis of the Single Columnar Transposition Cipher, Laguna Hills, Calif., Aegean Park Press, vol. C-59.
26. Bauer, Friedrich Ludwig (2002) Decrypted Secrets: Methods and Maxims of Cryptology 3rd edition, Berlin, Springer Verlag.
27. bbbseal (2005) is URL www.bbbonline.org.
28. bbc (2004) is http://www.bbc.co.uk/dna/h2g2/A787917.
29. Bell, D. E., and L. J. LaPadula (1974) "Secure Computer Systems: Mathematical Foundations and Model," Technical report, MITRE.
30. Blakley, G. R. (1979) "Safeguarding Cryptographic Keys," in AFIPS Conference Proceedings, 48:313-317.
31. Blowfish (2005) is URL http://www.schneier.com/blowfish.html.
32. Boneh D., and D. Brumley (2004) "Remote Timing Attacks Are Practical," available from http://crypto.stanford.edu/%7Edabo/abstracts/ ssl-timing.html.
33. BPCS (2003) is URL http://www.know.comp.kyutech.ac.jp/BPCSe/file BPCSe-principle.html.
34. Brenner, Susan W. (2002) "Organized Cybercrime? How Cyberspace May Affect the Structure of Criminal Relationships," North Carolina Journal of Law and Technology, 4(1).
35. business.com (2004) is http://www.business.com/directory/computers-and- software/security/hardware/tracking-and-theft-prevention/.
36. CA (2004) is http://www3.ca.com/securityadvisor/virusinfo/default.aspx.
37. Calif-gov (2005) ,"Your Social Security Number: Controlling the Key to Identity Theft," available online at URL http://www.privacy.ca.gov/ sheets/cis4english.htm.
38. Campbell, K. W., and M. J. Wiener (1993) "DES Is Not a Group," Advances in Cryptology, CRYPTO '92, New York, Springer Verlag, pp. 512-520.
39. Casanova, Giacomo (1757) Histoire de Ma Vie, in 12 volumes.
40. Translated by Willard R. Trask as The History of My Life, Baltimore, Johns Hopkins University Press, 1967, reissued 1997.
41. CDC (2004) is http://www.cdc.gov/.
42. CERT (2004) is URL http://www.cert.org/other-sources/viruses.html.
43. chatdanger (2005) is URL http://www.safekids.com/chatdanger.htm.
44. Chomsky, Noam, and George A. Miller (1958) "Finite State Languages," Information and Control, 1(2)91-112, May.
45. Code Red II (2001) "Code Red II: Another Worm Exploiting Buffer Overflow In IIS Indexing Service DLL," CERT Incident Note IN-2001-09, Aug. 6. Available online at http://www.cert.org/incident-notes/IN-2001-09.html.
46. Cohen, Fred (1987) "A cryptographic checksum for integrity protection,' Computers and Security, 6(6)505-510, December 1.
47. Cohen, Frederick B. (1994a) A Short Course on Computer Viruses, 2nd edition, New York, NY, John Wiley.
48. Cohen, Frederick B. (1994b) It's Alive! The New Breed of Living Computer Programs, New York, NY, John Wiley.
49. comscore (2004) is URL http://www.comscore.com/.
50. Conceptlabs (2004) is URL http://www.conceptlabs.co.uk/alicebob.html.
51. cookiecentral (2004) is http://www.cookiecentral.com/faq/#2.9.
52. Coppersmith, Donald, and Philip Rogaway (1994) "A Software-Optimized Encryption Algorithm," Fast Software Encryption, Cambridge Security Workshop Proceedings, New York, Springer-Verlag, pp. 56-63.
53. Coppersmith, Donald, and Philip Rogaway (1995) "Software-Efficient Pseudorandom Function and the Use Thereof for Encryption," United States Patent 5,454,039, 26 September.
54. corallosoftware (2005) is http://www.corallosoftware.com/index.html.
55. Cox, Ingemar J. (2002) Digital Watermarking, San Francisco, Morgan Kaufmann.
56. Crap (2005) is URL http://www.mat.dtu.dk/people/Lars.R.Knudsen/crap.html.
57. creditexpert (2005) is URL https://www.creditexpert.com/.
58. creditreporting (2005) is URL http://affiliates.creditreporting.com/.
59. Cryptologia (2005) is URL http://www.dean.usma.edu/math/pubs/cryptologia/ .
60. Cryptology (2005) is URL http://link.springer.de/link/service/journals/ 00145/.
61. CSE (2005) is URL http://www.cse.dnd.ca/.
62. csrc (2004) is http://csrc.nist.gov/CryptoToolkit/tkhash.html.
63. CVE (2001) is CVE-2001-0500, Buffer overflow in ISAPI extension, available online at http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0500.
64. cyberpatrol (2005) is URL http://www.cyberpatrol.com/.
65. CyberSitter (2005) is URL http://www.cybersitter.com/.
66. cypherpunks (2004) is ftp://ftp.csua.berkeley.edu/pub/cypherpunks/ steganography/.
67. Dawkins, Richard (1990) The Selfish Gene, 2nd Edition, New York, Oxford University Press.
68. Day (2004a) is http://www.csse.uwa.edu.au/~pd/securing-mac-os-x.pdf.
69. Day (2004b) is http://www.csse.uwa.edu.au/~pd/securing-mac-os-x-present. pdf.
70. Denning, Peter J. (1990) Computers Under Attack: Intruders, Worms, and Viruses, New York, ACM Press and Addison Wesley.
71. DES2 (1993) is http://www.itl.nist.gov/fipspubs/fip46-2.htm.
72. DES3 (1999) is csrc.nist.gov/publications/fips/fips46-3/fips46-3.pdf.
73. digitalenvoy (2004) is www.digitalenvoy.net/.
74. dodgeit (2004) is http://www.dodgeit.com/.
75. DSD (2005) is URL http://www.dsd.gov.au/.
76. dslreports (2004) is URL http://www.dslreports.com/scan.
77. Duke (2005) is URL http://www.oit.duke.edu/helpdesk/filesharing/.
78. Dunham W. (1990) Journey Through Genius: The Great Theorems of Mathematics, New York, John Wiley.
79. dvdbook (2005) is URL http://www.dvdforum.org/tech-dvdbook.htm.
80. eBates (2005) is URL https://www.ebates.com/.
81. eeggs (2005) is URL http://www.eeggs.com/.
82. EICAR (2004) is URL http://www.eicar.org/.
83. Encyc1 (2004) is http://www3.ca.com/securityadvisor/virusinfo/browse. aspx.
84. Encyc2 (2004) is http://securityresponse.symantec.com/avcenter/vinfodb. html.
85. ensuretech (2004) is URL http://www.ensuretech.com/.
86. equifax (2005) is URL http://www.equifax.com/.
87. Feige, Uriel, Amos Fiat, and Adi Shamir (1988) "Zero Knowledge Proofs of Identity," Journal of Cryptology, 1(2)77-94.
88. Feistel, Horst (1973) "Cryptography and Computer Privacy," Scientific American, 228(5) 15-23, May.
89. FIPS-180 (2005) is http://www.itl.nist.gov/fipspubs/fip180-1.htm.
90. FIPS-185 (2005) is http://www.itl.nist.gov/fipspubs/fip185.htm.
91. FIPS-186 (2005) is http://www.itl.nist.gov/fipspubs/fip186.htm.
92. Flannery, Sarah, and David Flannery (2001) In Code: A Mathematical Journey, Workman Publishing Company.
93. FreeBSD Words (2005) is URL ftp://www.freebsd.org/usr/share/dict/words.
94. freedom (2005) is URL www.freedom.net.
95. Friedman, William F. (1996) The Index of Coincidence and Its Applications in Cryptanalysis, Laguna Hills, Calif., Aegean Park Press, vol. C-49.
96. f-secure (2005) is URL http://www.f-secure.com/.
97. ftc (2004) is URL http://www.ftc.gov/opa/2003/09/idtheft.htm.
98. FTC-CONT (2005) is URL www.ftc.gov/bcp/conline/pubs/online/sitesee.html.
99. FTC-infosecurity (2005) is URL http://www.ftc.gov/bcp/conline/edcams/ infosecurity/index.html.
100. FTC-privacy (2005) is http://www.ftc.gov/privacy/index.html.
101. FTC-work (2005) is http://www.ftc.gov/bcp/workshops/spyware/index.htm.
102. fundrace (2005) is URL http://fundrace.org/citymap.php.
103. Gaines, Helen Fouché (1956) Cryptanalysis: A Study of Ciphers and Their Solutions, New York, Dover.
104. Garfinkel, Simson (1995) PGP: Pretty Good Privacy, Sebastopol, Calif., O'Reilly.
105. GCHQ (2003) is URL http://www.gchq.gov.uk/.
106. gemplus (2005) is URL http://www.gemplus.com/.
107. Gerrold, David (1988) When HARLIE Was One, Bantam Spectra (Random House), Updated edition.
108. getnetwise (2005) is URL www.getnetwise.org/.
109. getnetwise-ctrct (2005) is URL www.getnetwise.org/tools/toolscontracts. php.
110. GnuPG (2004) is http://www.gnupg.org/.
111. Golomb, Solomon W. (1982) Shift Register Sequences, 2nd edition, Laguna Hills, Calif., Aegean Park Press.
112. Google (2005) is URL desktop.google.com.
113. Gordon, Sarah (2005) "Virus Writers: The End of The Innocence?" available at URL http://www.research.ibm.com/antivirus/SciPapers/VB2000SG.htm.
114. Grampp, F. T., and R. H. Morris (1984) "UNIX Operating System Security," Bell Laboratories Technical Journal, 63(8)1649-1672, October.
115. gregorybraun (2005) is URL http://www.gregorybraun.com/PassKeep.html.
116. Guillou, Louis, and Jean-Jacques Quisquater (1988) "A Practical Zero-Knowledge Protocol Fitted to Security Microprocessors Minimizing Both Transmission and Memory," in Advances in Cryptology, Eurocrypt '88 Proceedings, pp. 123-128, Berlin, Springer-Verlag.
117. Guinness (2004) is www.guinnessworldrecords.com/.
118. Gutenberg (2005) is URL http://www.gutenberg.net/.
119. Guthke, Karl S. and Robert C. Sprung (1991) Traven: The Life Behind the Legends, Chicago, IL, Lawrence Hill Books.
120. Harley, David, Robert Slade, and Urs Gattiker (2001) Viruses Revealed, Berkeley, CA, Osborne/McGraw-Hill.
121. HastaLaVista (2004) is http://www.hastalavista.com (but don't use it, even at your own risk).
122. Hinsley, F. H., and Alan Stripp (eds.) (1992) The Codebreakers: The Inside Story of Bletchley Park, Oxford, Oxford University Press.
123. homograph (2005) is the PDF document at http://www.cs.technion.ac.il/ ~gabr/papers/homograph-full.pdf.
124. honker (2004) is URL http://www.cnhonker.com/.
125. House (2004) "Spyware: what you don't know can hurt you." Hearing before the subcommittee on commerce, trade, and consumer protection, April 29, 2004, serial no. 108-89. Available at http://www.access.gpo.gov/ congress/house/house05ch108.html.
126. Hydan (2005) is URL http://www.crazyboy.com/hydan/.
127. IANA port (2004) is URL http://www.iana.org/assignments/port-numbers.
128. IbmAntiVirus (2005) http://www.research.ibm.com/antivirus/.
129. idtheftcenter (2004) is http://www.idtheftcenter.org/index.shtml.
130. IIS (2004) is www.microsoft.com/iis.
131. Information Week (2004) is URL http://www.informationweek.com/story/ showArticle.jhtml?articleID=52601698.
132. insecure (2004) is URL http://www.insecure.org/nmap/.
133. intelius (2005) is URL http://find.intelius.com/.
134. IOCCC (2004) is http://www.ioccc.org/.
135. iridiantech (2005) is URL http://www.iridiantech.com/.
136. ISIS (2005) http://www.imrg.org/8025696F004581B3/pages/imrg+Resources.
137. ISS (2005) is URL www.iss.net.
138. ITU (2005) is URL http://www.itu.int/home/index.html.
139. Jack Moratis (2004) is http://home.comcast.net/~educbc5454/software.html.
140. Jargon (2004) is URL http://www.catb.org/~esr/jargon/.
141. Johnson, Neil F., et al. (2001) Information Hiding: Steganography and Watermarking-Attacks and Countermeasures, Advances in Information Security, volume 1, Boston, Kluwer Academic.
142. junkbusters declare (2005) is URL http://www.junkbusters.com/declare. html.
143. Kahn, David (1996) The Codebreakers: The Comprehensive History of Secret Communications from Ancient Times to the Internet, revised edition, New York, Scribner.
144. Katzenbeisser, Stefan, and Fabien A. P. Petitcolas (eds.) (2000) Information Hiding Techniques for Steganography and Digital Watermarking, Norwood, Mass., Artech House.
145. Kerckhoffs, Auguste (1883) "La Cryptographie Militaire," Journal des Sciences Militaires, 9:5-38, 161-191, January-February. Also available in html format from URL http://www.petitcolas.net/fabien/kerckhoffs/ la-cryptographie-militaire-i.htm.
146. Knowspam (2004) is URL http://www.Knowspam.net/.
147. knowyourloanrate (2005) is URL https://www.knowyourloanrate.com/.
148. Knuth, Donald E. (1984) The TEXBook, Reading, Mass., Addison-Wesley.
149. Konheim, Alan G. (1981) Cryptography: A Primer, New York, John Wiley and Sons.
150. Kuhn (2004) is URL http://www.cl.cam.ac.uk/TechReports/UCAM-CL-TR-577. pdf.
151. Larson, P. Å., and A. Kajla (1984) "Implementation of a Method Guaranteeing Retrieval in One Access," Communications of the ACM, 27(7)670-677, July.
152. Lavasoft (2004) is http://www.lavasoftusa.com/ or http://www.lavasoft.de/ .
153. Levy, Steven (2002) Crypto: How the Code Rebels Beat the Government Saving Privacy in the Digital Age, Penguin Putnam.
154. Mailblocks (2004) is URL http://www.Mailblocks.com.
155. MailFrontier (2004) is URL http://www.MailFrontier.com/.
156. mailinator (2004) is URL http://www.mailinator.net/mailinator/Welcome.do.
157. Maiwald, Eric and William Sieglein (2002) Security Planning and Disaster Recovery, Berkeley, CA, Osborne/McGraw-Hill.
158. maporama (2004) is http://www.maporama.com/share/.
159. mapquest (2004) is http://www.mapquest.com/maps/latlong.adp.
160. MathWorld (2005) is html file Gram-SchmidtOrthonormalization.html in URL http://mathworld.wolfram.com/.
161. McAfee (2004) is URL http://www.mcafee.com/us/.
162. McDonald, Andrew D., and Markus G. Kuhn (1999) "StegFS: A Steganographic File System for Linux," in Proceedings of Information Hiding, New York, Springer-Verlag, LNCS 1768, pp. 463-477. Also available from http://www.mcdonald.org.uk/StegFS/.
163. MD5 (2004) is ftp://ftp.umbc.edu/pub/unix/rfc/rfc1321.txt.gz.
164. melissavirus (2005) is URL www.melissavirus.com/.
165. Merkle, R. C., and M. Hellman (1981) "On the Security of Multiple Encryption," Communications of the ACM, 24(7)465-467.
166. missingkids (2005) is URL http://www.missingkids.com/.
167. Mitnick, Kevin D. and William Simon (2002) The Art of Deception: Controlling the Human Element of Security, New York, John Wiley.
168. Moore, Dan Tyler and MarthaWaller (1965) Cloak and Cipher, Indianapolis, IN, Bobbs-Merrill, 1962; London, Harrap.
169. MS04-028 (2004) is http://www.microsoft.com/technet/security/bulletin/ MS04-028.mspx.
170. MSoffice (2005) is URL http://office.microsoft.com/en-us/officeupdate/.
171. MSsecurity (2005) is URL http://www.microsoft.com/security/.
172. MStechnet (2005) is URL http://www.microsoft.com/technet/security/.
173. MTX (2005) is URL http://www.f-secure.com/v-descs/mtx.shtml.
174. NCM (2005) is URL http://www.nsa.gov/museum/.
175. netnanny (2005) is URL http://www.netnanny.com/.
176. Network solutions (2004) is URL http://www.networksolutions.com/en-US/ whois/index.jhtml.
177. networkusa (2005) is URL http://www.networkusa.org/fingerprint.shtml.
178. Newton, David E. (1997) Encyclopedia of Cryptology, Santa Barbara, Calif., ABC-Clio.
179. Nicetext (2005) is URL http://www.nicetext.com/.
180. NIST (1992) "The Digital Signature Standard, proposal and discussion," Communications of the ACM, 35(7):36-54.
181. NIST (2004) is URL http://csrc.nist.gov/virus/.
182. NIST Handbook (2004) is available at csrc.nist.gov/publications/nistpubs/ 800-12/handbook.pdf.
183. NISTunits (2004) is http://physics.nist.gov/cuu/Units/binary.html.
184. NSA (2004) is http://www.nsa.gov/.
185. NSA-SEC (2005) is URL http://www.nsa.gov/snac/.
186. NSA-venona (2004) is http://www.nsa.gov/venona/.
187. onion-router (2005) is URL http://www.onion-router.net/.
188. OpenPGP (2005) is http://www.openpgp.org/.
189. opensecrets (2005) is URL http://www.opensecrets.org/indivs/.
190. OpenSSL (2004) is the OpenSSL project, located at http://www.openssl.org.
191. Orebaugh, Angela D. and Gilbert Ramirez (2004) Ethereal Packet Sniffing, Rockland, Mass., Syngress.
192. packet-sniffing (2004) is URL http://www.packet-sniffing.com/.
193. pchell (2005) is URL http://www.pchell.com/virus/mtx.shtml.
194. PCPhoneHome (2004) is http://www.pcphonehome.com/.
195. performics (2005) is http://www.performics.com/about/press/code-of- conduct.pdf.
196. Petitcolas (2003) is URL http://www.petitcolas.net/fabien/steganography/ bibliography/.
197. Pfitzmann, B. (1996) "Information Hiding Terminology," in Information Hiding, New York, Springer
198. Lecture Notes in Computer Science, 1174:347-350.
199. ping (2004) is URL http://ftp.arl.mil/~mike/ping.html.
200. PKCS (2004) is http://www.rsasecurity.com/rsalabs/node.asp?id=2124.
201. Pohlmann, Ken (1992) The Compact Disc Handbook, 2nd edition, Middleton, Wisconsin, A-R Editions.
202. privacyalliance (2005) is URL http://www.privacyalliance.org/.
203. privacyrights (2005) is URL http://www.privacyrights.org/fs/fs21- children.htm.
204. protectkids (2005) is URL http://www.protectkids.com/.
205. purityscan (2005) is URL http://www.purityscan.com/.
206. qspace (2005) is URL http://qspace.iplace.com/.
207. Quova (2004) is www.quova.com/.
208. Raymond (2004) is URL http://www.catb.org/~esr/faqs/.
209. Reiter, Michael K. and Aviel D. Rubin (1998) "Crowds: Anonymity for Web Transactions," ACM Transactions on Information and System Security, 1(1)66-92
210. remotelyanywhere (2004) is URL http://www.remotelyanywhere.com/.
211. Rescorla, Eric (2000) SSL and TLS: Designing and Building Secure Systems, Reading, Mass., Addison Wesley.
212. RFC-862 (2004) is at URL www.faqs.org/rfcs/rfc862.html.
213. RFC-864 (2004) is at URL www.faqs.org/rfcs/rfc864.html.
214. rfc1321 (2005) is URL http://www.ietf.org/rfc/rfc1321.txt.
215. RFC-1738 (2004) is at URL www.faqs.org/rfcs/rfc1738.html.
216. RIAA (2005) is URL http://www.riaa.com/about/members/.
217. Ritter (2005) is URL http://www.ciphersbyritter.com/ARTS/PRACTLAT.HTM.
218. Ritter, Terry (1990) "Substitution Cipher with Pseudo-Random Shuffling: The Dynamic Substitution Combiner," Cryptologia 14(4)289-303. An updated version is available at http://www.ciphersbyritter.com/DYNSUB.HTM.
219. Rivest, R. (1991) "The MD4 Message Digest Algorithm," in Menezes, A. J., and S. A. Vanstone, (eds.), Advances in Cryptology: CRYPTO '90 Proceedings, pp. 303-311, New York, Springer-Verlag.
220. Rivest, R. (1992) "The MD4 Message Digest Algorithm," RFC 1320, MIT and RSA Data Security, Inc., April.
221. Rochlis, J., and M. Eichin (1989) "With Microscope and Tweezers: The Worm from MIT's Perspective," Communications of the ACM, 32(6):689-698, June.
222. Roman, Steven (1999) Writing Word Macros, Sebastopol, CA, O'Reilly Assoc.
223. Rosenberger (2005) is URL http://www.vmyths.com/fas/fas1.cfm.
224. RSA (2001) is URL http://www.rsasecurity.com/rsalabs/challenges/ factoring/file faq.html.
225. RSA-MD4 (2005) is http://www.rsasecurity.com/rsalabs/node.asp?id=2253.
226. RSASecurID (2004) is http://www.rsasecurity.com/node.asp?id=1157.
227. RSAsecurity (2004) is URL http://www.rsasecurity.com/.
228. safekids (2005) is URL http://www.safekids.com/.
229. SaftLite (2005) is available at http://haoli.dnsalias.com/shared/saft- lite.hqx.
230. Salomon, David (2003) Data Privacy and Security, New York, Springer Verlag.
231. Salomon, David (2004) Data Compression: The Complete Reference, 3rd edition, New York, Springer Verlag.
232. Salomon, David (2005) Coding for Data and Computer Communications, New York, Springer Verlag.
233. Savard (2005) is URL http://home.ecn.ab.ca/~jsavard/crypto/jscrypt.htm.
234. scc-inc (2004) is http://www.scc-inc.com/SccVsLexmark/.
235. Schneier, Bruce (1993) "Fast Software Encryption," in Cambridge Security Workshop Proceedings, pp. 191-204. New York, Springer-Verlag. Also available from http://www.counterpane.com/bfsverlag.html.
236. Schneier, Bruce (1995) Applied Cryptography: Protocols, Algorithms, and Source Code in C, 2nd edition, New York, John Wiley.
237. Schneier, Bruce (2003) is URL http://www.counterpane.com/crypto-gram. html.
238. Schneier, Bruce (2004) Secrets and Lies: Digital Security in a Networked World, Hoboken, NJ, John Wiley & Sons.
239. Schnorr, Claus Peter (1991) "Efficient Signature Generation for Smart Cards," Journal of Cryptology, 4(3)161-174.
240. Schotti, Gaspari (1665) Schola Steganographica, Jobus Hertz, printer. Some page photos from this old book are available at URL http://www.cl.cam.ac. uk/~fapp2/steganography/steganographica/index.html.
241. SearchAndDestroy (2004) is URL http://www.SearchAndDestroy.com/.
242. secunia (2004) is http://secunia.com/.
243. send-safe (2005) is URL http://www.send-safe.com.
244. Shamir, Adi (1979) "How to Share a Secret," Communications of the ACM, 22(11)612-613, November.
245. Shamir, Adi and Eran Tromer (2004) "Acoustic cryptanalysis," available online in html format at URL http://www.wisdom.weizmann.ac.il/~tromer/ acoustic/.
246. Shannon, Claude E. (1949) "Communication Theory of Secrecy Systems," Bell System Technical Journal, 28:656-715, October.
247. Shannon, Claude E. (1951) "Prediction and Entropy of Printed English," Bell System Technical Journal, 30:50-64, January.
248. Shoch, John and Jon Hupp (1982) "The Worm Programs-Early Experience With a Distributed Computation," Communications of the ACM, 25(3)172-180. Reprinted in [Denning 90].
249. Simovits, Mikael J. (1996) The DES, an Extensive Documentation and Evaluation, Laguna Hills, Calif., Aegean Park Press, vol. C-68.
250. Singh, Simon (1999) The Code Book, New York, Doubleday.
251. Sinkov, A. (1980) Elementary Cryptanalysis: A Mathematical Approach (New Mathematical Library, No. 22), Washington, D.C., Mathematical Assn. of America.
252. smartcardalliance (2005) is http://www.smartcardalliance.org/industry- info/index.cfm.
253. Skoudis (2005) is http://infosecuritymag.com/skoudis
254. snapfiles (2004) is URL http://www.snapfiles.com/.
255. sophos (2005) is URL www.sophos.com/virusinfo/hoaxes.
256. Sorkin, Arthur (1984) "Lucifer, A Cryptographic Algorithm," Cryptologia, 8(1):22-41, January. An addendum is in 8(3)260-261.
257. spam (2004) is URL http://media.hormel.com/templates/knowledge/knowledge. asp?catitemid=14&id=94.
258. spam abuse (2004) is URL http://spam.abuse.net/others/sites.shtml.
259. SpamArrest (2004) is URL http://www.SpamArrest.com.
260. spambob (2004) is http://spambob.com/.
261. spamcop (2005) is URL http://www.spamcop.com/.
262. spamgourmet (2004) is http://www.spamgourmet.com/.
263. Spamhaus (2005) is URL http://www.spamhaus.org/.
264. spamhauslasso (2005) is http://www.spamhaus.org/statistics.lasso.
265. SpectorSoft (2004) is http://www.SpectorSoft.com/.
266. Spybot (2004) is http://www.spybot.info/en/index.html.
267. Spy Sweeper (2005) is URL http://www.webroot.com/.
268. spywareguide (2004) is URL http://www.spywareguide.com/.
269. spywareguide-country (2004) is URL http://www.spywareguide.com/articles/ country-code-extensions-look-u-45.html.
270. spywareinfo (2004) is URL http://www.spywareinfo.com/.
271. ssa-gov (2004) is URL https://s044a90.ssa.gov/apps6/isss/bp-7004home.jsp.
272. ssa-form (2004) is http://www.ssa.gov/online/ssa-7004.pdf.
273. ssa-stat (2005) is URL https://s044a90.ssa.gov/apps6a/isss/main.html.
274. Stallings, William (1998) Cryptography and Network Security: Principles and Practice, Englewood Cliffs, N.J., Prentice-Hall.
275. Staniford, Stuart, Vern Paxson, and Nicholas Weaver (2002) "How to Own the Internet in Your Spare Time," Proceedings of the 11th USENIX Security Symposium (Security '02). Available online at http://www.icir.org/vern/ papers/cdc-usenixsec02/index.html.
276. Steganosaurus (2004) is URL http://www.fourmilab.to/stego/.
277. Stego (2005) is URL http://www.stego.com/.
278. Stoll, Clifford (1988) "Stalking the Wily Hacker," Communications of the ACM, 31(5) 484-497, May.
279. Stoll, Clifford (1990) The Cuckoo's Egg, Bodley Head.
280. Stoll, Clifford (2004) http://www.ocf.berkeley.edu/~stoll/.
281. storagereview (2000) is URL http://www.storagereview.com/guide2000/ref/ hdd/index.html.
282. Strunk, William Jr. (1918) The Elements of Style, Ithaca, NY, W. P. Humphrey, (also NY, Bartleby.com 1999).
283. sweetcocoa (2005) is URL http://homepage.mac.com/sweetcocoa/lapcop/.
284. Symantec (2004) is URL http://www.symantec.com/index.htm.
285. takedown (2004) is URL http://www.takedown.com/.
286. technet (2004) is http://www.microsoft.com/technet/archive/community/ columns/security/essays/10imlaws.mspx.
287. theinquirer (2004) is UTL http://www.theinquirer.net/?article=19159.
288. Thomas, Steven A. (2000) SSL and TLS Essentials: Securing the Web, New York, John Wiley.
289. Thompson, Ken (1984) "Reflections on Trusting Trust," Communications Of The ACM, 27(8)172-180.
290. TransUnion (2005) is URL https://www.freecreditprofile.com/.
291. Trithemius, Johannes (1606) Steganographia. Available (for private use only) from URL http://www.esotericarchives.com/tritheim/stegano.htm.
292. truste (2005) is URL http://www.truste.org/.
293. Unicode (2005) is URL http://www.unicode.org.
294. Unicode Standard (1996) The Unicode Standard, Version 2.0, Reading, Mass., Addison-Wesley.
295. van Eck, Wim (1985) "Electromagnetic Radiation from Video Display Units: An Eavesdropping Risk," Computers and Security, 4:269-286.
296. Verisign (2004) is http://www.verisign.com/products-services/security- services/pki/unified-authentication/.
297. versiontracker (2005) is URL http://www.versiontracker.org/.
298. Virus bulletin (2005) Virus Bulletin: The International Publication on Computer Virus Prevention, Recognition, and Removal. Available online at http://www.virusbtn.com/magazine/.
299. vmyths (2005) is URL http://www.vmyths.com/.
300. vote-smart (2005) is http://www.vote-smart.org/pdf/vsdm2004/vsdm-2004. pdf.
301. WatermarkingWorld (2005) is located at URL http://www.watermarkingworld. org/.
302. Wayner, Peter (1992) "Mimic Functions," Cryptologia, XVI(3)193-214, July.
303. Wayner, Peter (2002) Disappearing Cryptography, 2nd edition, London, Academic Press.
304. Webopedia (2004) is URL http://www.webopedia.com/.
305. webroot (2004) is URL http://www.webroot.com/.
306. Western digital (2004) is URL http://www.wdc.com/en/products/Products. asp?DriveID=35.
307. Wild List (2004) is URL http://www.wildlist.org/.
308. Witten, Ian H. (1987) "Computer (In)security: Infiltrating Open Systems," ABACUS, 4(4)7-25. Also available from http://cryptome.org/ compinsec.htm and in [Denning 90].
309. Wright, Peter (1989) Spycatcher: The Candid Autobiography of a Senior Intelligence Officer, New York, Random House.
310. Wyatt, Allen (2004) Cleaning Windows XP for Dummies, New York, John Wiley.
311. Zalewski, Michal (2005) Silence on the Wire: A Field Guide to Passive Reconnaissance and Indirect Attacks, San Francisco, CA, No Starch Press.
312. Zimmermann, Philip (1995) PGP Source Code and Internals, Cambridge, Mass., MIT Press.
313. Zimmermann, Philip (2001) is http://www.philzimmermann.com/.