I suggest you take a look at Internet RFC 1244 (aka FYI 8), the "Site Security
Handbook". Find it at your nearest RFC archive.
On Thu, 5 Aug 1993, Andrew T. Robinson wrote:
> I am interested in the titles of any publications dealing with
> network security, especially WAN/Internet security, which are
> considered (by whoever) to be essential reading.
> My interest in the security area is very broad. I'd be particularly
> interested in anything that is accessible from Internet/BITNET.
> I'm sure this is a FAQ, so if there's a list somewhere just point
> me to it.
> Andy Robinson