Expert Insights on Mobile Code Risk Management Strategies
Here's a really good article by Steve Bellovin and others from CERT that attempt to provide "risk management" instead of "risk avoidance"
Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
How to: Secure My Network in Linux - Page 6
Find the HOWTO or step-by-step guide that you need right here.
How to Investigate Unexpected Outbound Connections on Linux
Imagine logging into a production Linux server for routine maintenance and noticing background network activity connecting to an unfamiliar external IP address. Your endpoint protection agent is not popping up with an alert, there is no service failu...
How to Build a Tamper-Resistant Logging Infrastructure for Linux
When you’re digging through an incident, your logs are ...
How to Investigate High System Load During a Security Incident
When a production server spikes at 99% CPU or the disk ...
Network Protection: Effective Strategies And Best Practices
This is a document discusses an interesting perspective on network security and how to develop a sound security strategy.
Understanding TCP And UDP Security Threats and Mitigation Strategies
This is a Sun document that describes what many of the most common TCP and UDP network security vulnerabilities exist, as well as how to reduce their threat.
Nessus: Comprehensive Free Security Scanner for Vulnerability Assessment
Nessus is a free, powerful, and up-to-date security scanner that takes nothing for granted.
Discover Snort's Alert Generation Features for Network Security
A one-of-a-kind content-based IDS tool that generates alerts to syslog and/or text files. Comes with more than 1100 attack signatures.
RFC 2267: Techniques for Filtering Spoofed Packets to Prevent DoS
RFC 2267, "Network Ingress Filtering: Defeating Denial of Service Attacks Which Employ IP Source Address Spoofing" by Paul Ferguson and Daniel Senie details methods for filtering spoofed packets on your network
IPTraf: Essential Tool for Monitoring LAN Traffic and TCP Connections
IPTraf is a console-based network statistics utility for Linux. It gathers a variety of figures such as TCP connection packet and byte counts, interface statistics and activity indicators, TCP/UDP traffic breakdowns, and LAN station packet and byte c
Secure Shell (SSH): Enhancing Data Transmission Security
SSH is a powerful, yet easy-to-use application that uses strong cryptography for protecting all transmitted confidential data, including passwords, binary files, and administrative commands.
COPS: Essential Tools to Address UNIX Security Concerns Effectively
COPS is a collection of about a dozen programs that each attempt to tackle a different problem area of UNIX security. Kind of dated now, but still valuable.
Guide To Configuring IPsec For Linux, OpenBSD, And Kame/*BSD Systems
Aim of this document to give some examples for setting up IPsec between different operating systems. Tested platforms were OpenBSD 3.3, GNU/Linux using Super-FreeS/WAN 1.99_kb4, Kame/NetBSD 1.6.1, Windows 2000 and PGPNet on WindowsME.
FreeS/WAN IPSEC Implementation: Enhance Linux Network Security
FreeS/WAN is a Linux implementation of the IPSEC (IP security) protocols. IPSEC provides encryption and authentication services at the IP (Internet Protocol) level of the network protocol stack.
Overview Of Home Network Security Risks And Protection Best Practices
This CERT document gives home users an overview of the security risks and countermeasures associated with Internet connectivity, especially in the context of 'always-on' or broadband access services (such as cable modems and DSL).
Configuring Bandwidth Constraints on Linux-Based Server Systems
This document describes how to set up your Linux server to limit download bandwidth or incoming traffic and how to use your internet link more efficiently. This is useful when our internet link is slow or our LAN users download tons of mp3s and the n
Comprehensive Guide to Gkrellm Setup Over SSH for Clients and Servers
In this Mini-HOWTO I'll be talking about what to do server side and client side to set up Gkrellm over ssh.
Proactive Approach to Intrusion Detection Using Anomaly Rules
This document describes another method for intrusion detection. It is based on a proactive ruleset as opposed to reactive ruleset.
Optimize Your Server Backup Process Using the Rsync Tutorial Guide
A tutorial on backing up servers via rsync.
Secure Passwordless SSH Setup for Remote Command Execution
Many of my past newsletters have detailed configuration setups that required you to be able to execute commands on remote machines without interactively supplying a password. The next few articles will help show how you can set up such a system.
Comprehensive Guide To Hardening Linux Systems For Enhanced Protection
The process of modifying a system to make it highly secure is known as hardening.
Exploring Effective Strategies for Security in System Development
The approach used by this document is to instead shame developers into producing better systems.
Practical Unix Auditing Guide With Cross-References For Linux
This handbook is meant to be a practical guide to auditing Unix. It will be kept as up-to-date as possible. The commands and filenames given here are applicable to a Sun Solaris system. However, there are cross-command references for AIX and Linux.
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!