Government publications describe in detail the standards, policies, methods, and terminology associated with computer security. Other security publications are useful in gaining a thorough understanding of UNIX security problems and solutions.
The web also provides resources. In particular, the CERT (https://www.sei.cmu.edu/about/divisions/cert/index.cfm) web site alerts companies and users to security holes in the software. The SANS Institute (https://www.sans.org/) offers training, an extensive glossary of terms, and an updated list of top threats from the Internet.
The U.S. government offers many of its publications on the web. The U.S. Department of Homeland Security (https://www.us-cert.gov/security-publications) publishes security information. Also, the Computer Security Resource Center (CSRC) of the National Institute of Standards and Technology (NIST) publishes articles on computer security. The following are a sample of the publications that can be downloaded from the NIST site (https://csrc.nist.gov/).
An Introduction to Computer Security: The NIST Handbook. SP 800-12, October 1995.
Standard Security Label for Information Transfer. FIPS-188, September 1994.
Swanson, Marianne and Barbara Guttman. Generally Accepted Principles and Practices for Securing Information Technology Systems. SP 800-14, September 1996.
Tracy, Miles, Wayne Jensen, and Scott Bisker. Guidelines on Electronic Mail Security. SP 800-45, September 2002. Section E.7 concerns securely configuring LDAP for mail.
Wilson, Mark and Joan Hash. Building an Information Technology Security Awareness and Training Program. SP 800-61, January 2004. Includes a useful glossary.
Grace, Tim, Karen Kent, and Brian Kim. Computer Security Incident Handling Guidelines. SP 800-50, September 2002. Section E.7 concerns securely configuring LDAP for mail.
Sun Microsystems Security Engineers. Solaris 10 Security Essentials. Prentice Hall, 2009.
Garfinkel, Simson, Gene Spafford, and Alan Schwartz. Practical UNIX and Internet Security, 3rd Edition. O'Reilly & Associates, Inc, Sebastopol, CA, 2006.
Nemeth, Evi, Garth Snyder, Trent R. Hein, and Ben Whaley. UNIX and Linux System Administration Handbook (4th Edition) Pearson Education, Inc. 2010.
Brunette, Glenn M. Toward Systemically Secure IT Architectures. Archived Oracle Technical Paper, June 2006.
Kaufman, Charlie, Radia Perlman, and Mike Speciner. Network Security: Private Communication in a Public World, 2nd Edition. Prentice-Hall, 2002.
Pfleeger, Charles P. and Shari Lawrence Pfleeger. Security in Computing. Prentice Hall PTR, 2006.
Privacy for Pragmatists: A Privacy Practitioner's Guide to Sustainable Compliance. Sun Microsystems, Inc, August 2005.
Rhodes-Ousley, Mark, Roberta Bragg, and Keith Strassberg. Network Security: The Complete Reference. McGraw-Hill/Osborne, 2004.
McClure, Stuart, Joel Scambray, George Kurtz. Hacking Exposed 7: Network Security Secrets & Solutions, Seventh Edition. McGraw-Hill, 2012.
Stoll, Cliff. The Cuckoo's Egg. Doubleday, 1989.