212 Index Pre-shared key (PSK) , 145 Privacy policies , 199 Private Communication Technology (PCT) , 143 Private key , 136 , 155 , 157­8 Privilege escalation , 1­2 Protected Extensible Authentication Protocol (PEAP) , 121­2 Protocol analyzers , 74 , 128 Proxy server , 73 Public key , 136 , 155 Public key certificate , 155 Public key infrastructure (PKI) , 153 certificate management , 162­3 components of , 155 certificate authority , 158­9 certificate revocation list , 156 certificate revocation list , 159­60 certification authority , 156 digital certificates , 156 key escrow , 160 recovery agents , 156­8 Redundant Arrays of Inexpensive Disks (RAID) , 53 , 171­2 Redundant systems , 169 connections , 170 ISP , 170­1 servers , 169­70 Reflected XSS attacks , 39­40 Registration authorities (RA) , 160­1 Relative distinguished name , 117 Remote Authentication Dial-In User Service (RADIUS) , 114 Remote Desktop Services , 55 Removable media , see Removable storage devices Removable storage devices , 12­13 Replay attack , 64 Rijndael , 142 Risk assessment and risk mitigation , 127 audits , 132 intrusion detection system , 130 logging and auditing , 130­2 monitoring tools usage , 129­30 Security Enhanced (SE) Linux , 22 Security groups , 97 Security Parameters Index (SPI) , 146 Security-related HR policies , 203 code of ethics , 203 Security templates , 21­2 SecurityFocus Web site , 19 Self-signed certificate , 159 Separation of duties , 92 Sequenced Packet Exchange (SPX) , 62 Server clusters , 170 Server Core , 51 Server OS hardening , 23 data repositories , 25­6 DHCP servers , 25 DNS servers , 24 file and print servers , 25 FTP servers , 23­4 NNTP servers , 24 services and protocols, enabling and disabling , 23