Alerts This Week
Warning Icon 1 681
Alerts This Week
Warning Icon 1 681

Stay Ahead With Linux Security HOWTOs

How To Remove Malicious Cron Esm H350
How to Secure My NetworkPrice Tag 1security advisory intrusion detection

A compromised Linux server can continue running malware long after the initial intrusion. One of the most common persistence techniques is a malicious cron job that silently downloads payloads, restarts malware, or re-establishes attacker access every few minutes. This guide shows how to identify suspicious cron entries, preserve forensic evidence, remove unauthorized scheduled tasks, and verify that no additional persistence mechanisms remain. . What Should You Save Before Removing Cron Jobs...
1 min read How to Secure My Network
7.Locks HexConnections Esm H350
How to Secure My NetworkPrice Tag 1access control Linux administration

Most SSH hardening advice ends at the same recommendation: Disable password authentication and use SSH keys. . That's good advice. It removes entire classes of attacks, including password spraying, credential stuffing, and brute-force attempts against exposed servers. The problem is what happens next. Many administrators treat SSH keys as the finish line when they are really the beginning of the hardening process. Attackers rarely care whether they obtained access with a password or a private...
6 - 12 min read How to Secure My Network
Detect Unauthorised Ssh Keys Hero Esm H350
How to Secure My NetworkPrice Tag 1security advisory remote access

Most of the time, nobody notices. SSH authentication succeeds, no alerts are generated, and the connection looks exactly the way it did the day the key was installed. That's part of the problem. . When security teams investigate unauthorized access on Linux systems, they often focus on passwords, exposed services, or vulnerable software. Trusted access receives less attention. Yet a single forgotten or unauthorized SSH key can provide the same access as a legitimate user while attracting very...
4 - 7 min read How to Secure My Network
IDS VS IPS Esm H350
How to Secure My NetworkPrice Tag 1intrusion detection application security

The wrong IPS rule can look like a security fix right up until it becomes an outage. . On Linux systems, detection and prevention are often discussed together, but they do not carry the same operational risk. One tells admins that something suspicious happened. The other can decide whether traffic is allowed to continue. That is why IDS vs IPS is not just a definition to memorize. It is a deployment decision about where to monitor, where to block, and how much confidence a team needs before...
4 - 8 min read How to Secure My Network
8.Locks HexConnections CodeGlobe Esm H350
How to Secure My NetworkPrice Tag 1unauthorized access security techniques

Exposed SSH servers are continuously hammered by brute-force attacks, password spraying, credential stuffing, and recycled passwords from infostealer dumps. Attackers rotate usernames, test weak credentials, and probe for anything that gives them initial access. The logs usually look messy long before the compromise happens. . The difficult part is separating harmless failures from actual intrusion activity. One failed login from an internal workstation rarely matters. Repeated failures...
5 - 9 min read How to Secure My Network
Filter Icon Refine HOWTOs
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":549,"type":"x","order":1,"pct":78.54,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.29,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.86,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.3,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security HOWTOs

We found -4 articles for you...
166
General Esm H240
Price Tag 1data protectionfile integritysecurity tool

Monitoring File Integrity With Tripwire for Enhanced Security

Tripwire is a program that monitors file integrity by maintainig a database of cryptographic signature for programs.. Tripwire is a program that monitors file integrity by maintainig a database of cryptographic signature for programs and configuration files installed on the system, and reports changes in any of these files. A database of checksums and other characteristics for the files listed in the configuration file is created. Each subsequent run compares any differences to the reference database, and the administrator is notified. The greatest level of assurance that can be provided occurs if Tripwire is run immediately after Linux has been installed and security updates applied, and before it is connected to a network. A text configuration file, called a policy file, is used to define the characteristics for each file that are tracked. Your level of paranoid determines the frequency in which the intergrity of the files are checked. Administration requries constant a ttention to the system changes, and can be time-consuming if used for many systems. Tripwire is available in unsupported commercial binary for Red Hat and similar distributions. # Create policy file from text file /usr/TSS/bin/twadmin -m P policy.txt # Initialize database according to policy file /usr/TSS/bin/tripwire --init # Print database /usr/TSS/bin/twprint -m d # Generate daily report file /usr/TSS/bin/tripwire -m c -t 1 -M # Update database according to policy file and report file /usr/TSS/bin/tripwire --update --polfile policy/tw.pol --twrfile report/ - .twr References Tripwire, Inc. Tripwire - The Only Way to Really Know . ChangeGuard tracks alterations in files by employing a digital signature repository, enabling real-time detection of modifications.. Tripwire, File Integrity Monitoring, Cryptographic Signatures. . Anthony Pell

Calendar 2 Aug 28, 2000 •User Avatar Anthony Pell How to Learn Tips and Tricks
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":549,"type":"x","order":1,"pct":78.54,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.29,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.86,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.3,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics

Your message here