login
Click on the red underlined text to get to the source
... that is anonymous, or guest, access. This may be either anonymous
FTP or guest (unauthenticated) login. It is extremely important to
ensure that anonymous FTP servers and guest login ...
... login. It is extremely important to
ensure that anonymous FTP servers and guest login userids are
carefully isolated from any hosts and file systems ...
... disabling, even if the correct password is presented, the
message displayed should remain that of a failed login attempt.
Implementing this mechanism will require that legitimate users
contact their system administrator ...
... Users will occasionally mis-type a password. Set a short delay - say
two seconds - after the first and second failed logins, and force a
disconnect after the third. This will slow down automated password
...
... All Logins Should Be Logged ...
...
All logins, whether successful or unsuccessful should be logged.
However, do not keep correct passwords in the log. Rather, log them
...
... However, do not keep correct passwords in the log. Rather, log them
simply as a successful login attempt. Since most bad passwords are
mistyped by authorized users, they only vary by a single character
...
... If Calling Line Identification is available, take advantage of it by
recording the calling number for each login attempt. Be sensitive to
the privacy issues raised by Calling Line Identification ...
... can provide valuable information to a would-be intruder. Instead,
each site should create its own specific login banner, taking care to
only include necessary information.
...
... callers using your modem pool as part of a
chain of logins. This can be hard to detect, particularly if a
hacker sets up a path through several hosts on your site.
...
... information you want to collect includes: username and hostname, for
login and logout; previous and new access rights, for a change of
access rights ...
... The best rule when it comes to propriety is to not use any facility
of remote sites which is not public. This clearly excludes any entry
onto a system (such as a remote shell or login session) which is not
expressly permitted. This may be very tempting; after a breach of
...