Perhaps you're looking for the FAQ I've written for comp.unix.admin. [Text version here.].
Or maybe you're looking for the paper I wrote on the state of password cracking in 1997 . [text version here].
The most recent thing added is the notes for the seminar on securing a Unix/Linux system
Pardon the sparseness of this page; my main page is elsewhere.
Questions? You can mail me at khockenb@stevens-tech.edu