Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Find the HOWTO or step-by-step guide that you need right here.
One of the fundamental security vulnerabilities that exist among many of the popular flavors of exploits such as XSS and SQL Injection, as well as many others, is the lack of input validation. Web applications that check...
This article explains how to recover lost files after you accidentally wipe your hard drive.
This document provides suggestions for how the Linux community can effectively advocate the use of Linux.
This document covers programming the Linux kernel modules.
For the Linux novice, installing a new build can be a daunting task. This chapter will help you figure out what you need and what you don't. Even Linux pros will find some tips on configuring a build that can help enhance security.
The second and final part of our guide to network expansion looks at storage, software and load balancing.
The Debian Security Audit Project is a project which is focused upon auditing Debian packages for security issues.
The Guide forms the basis for corporate web security policies for several Fortune 500 companies and is used in service offerings from many security consulting companies.
There have been other papers on SQL injection, including some that are much more detailed, but this one shows the rationale of discovery as much as the process of exploitation.
The CISSP Open Study Guide web site is a site dedicated to helping CISSP (certified information system security professionnals) student in their quest to become certified.
Guardian Digital's "Achieving Compliance" white paper will serve as a resource to explain the mandates of Sarbanes-Oxley as it pertains to information technology and to further explain how Guardian Digital, the premier Internet and network security c
This paper explains the importance and implications of open source in education. The open source movement has become more than just a better way of writing software. The open source movement can be seen as a culture, an ideology and a better way for
The honeynet project is a group of security professionals dedicated to learning the tools, tactics, and motives of the blackhat community and sharing those lessons learned. The team collects this information on their own time with their own resources
A good overall summary about how to create ssh1 and ssh2 keypairs. Includes references to other sources.
This HOWTO discusses how to configure IPSec for Linux and connecting to it using the PGPNet VPN client.
This document is intended to be a primer on how to get IPsec on FreeBSD up and running, interoperating both with another FreeBSD (or NetBSD or any other KAME-derived stack) machine, and a Windows 2000 machine.
Black hats use 'passive fingerprinting' to identify your operating system without you knowing it. But the technique is useful for white hats too. This article discusses those techniques used by Blakc/White hats and how you can prevent them.
This article discusses techniques one can use to prevent software Buffer Overflows.
The first but secondary purpose of this article is to introduce you this nifty networking tool: /usr/bin/netcat which is well available from the Debian GNU/Linux under the package name netcat. (The drill: apt-get install netcat and you're done.) Ther
This page details how the chroot() system call can be used to provide an additional layer of security when running untrusted programs. It also details how this additional layer of security can be circumvented.
Like staying secure? So do we.
Sign up for updates, tips, and alerts!
