Server Security - Page 9

Rootkit Injection: Severe Threat to Web Servers by Advanced Linux Malware

One of the more advanced rootkits to have hit town in recent memory has got security researchers across the globe in a tizz, even though it hasn

• LinuxSecurity.com Team
• Nov 20, 2012

HTTPS Everywhere 3.0: EFF Boosts Web Security With 1,500 New Site Additions

The Electronic Frontier Foundation (EFF) has released a new version of its HTTPS Everywhere browser extension for Firefox that now supports encryption on even more web sites. The US digital rights advocacy organisation says that version 3.0 of its Firefox add-on, which automatically redirects users to more secure HTTPS connections when accessing certain web pages, now supports an additional 1,500 sites, more than twice as many as previous stable releases.

• LinuxSecurity.com Team
• Oct 09, 2012

NSA Discusses Android Security Improvements At LinuxCon 2012

It's no secret that Google's Android mobile operating system has had its share of security flaws. But what is less well-known is that the U.S. government's National Security Agency (NSA) is among the teams working to improve Android security.

• LinuxSecurity.com Team
• Aug 30, 2012

NetWeird Malware Toolkit Turns Mac Into Low-Cost Botnet Tool

Going once, going twice: The new NetWeird toolkit can be used to infect Apple OS X systems, converting Macs into zombies ready to do your botnet bidding, with prices starting at just $60.

• LinuxSecurity.com Team
• Aug 24, 2012

Mat Honan Hack: Security Wake-Up Call from a Disturbing Incident

If I've seemed a little bleary-eyed and inattentive this week you can blame Jim Fallows. Late on Tuesday night I read his post about gmail, which linked to Mat Honan's piece for Wired about the destruction of his (Honan's) digital life. I was then up most of the night implementing Jim's advice about improving my computer security. This is by no means the first warning Jim has issued.

• LinuxSecurity.com Team
• Aug 13, 2012

Essential Linux Admin Tools for Enhancing Security on CentOS System

Most Linux distributions have a significant focus on security. This does not mean they are necessarily ready for production out of the box. Tools like SELinux, excellent firewall options, and robust access controls can make Linux exceptionally secure.

• LinuxSecurity.com Team
• Jul 23, 2012

Strategies to Strengthen the Security of Your Cloud Account Safely

They say the cloud is the future of computing. All your data and software programs, now known as web apps, will reside in the cloud and the computer itself will act as a

• LinuxSecurity.com Team
• Jun 14, 2012

Sandboxing Against Flame: Understanding Cyber Threat Mitigation Strategies

Bigger lesson learned from Flame: Multiple layers of security needed, so when one technology fails, a second or third may succeed

• LinuxSecurity.com Team
• Jun 11, 2012

Fedora's UEFI Secure Boot Trade-Offs on Windows 8 Certified Machines

Life is full of trade-offs, and many times they are not palatable for every side. Such was the trade-off proposed by Fedora developers this week to solve the upcoming obstacle of UEFI secure booting on Windows 8-certified machines.

• LinuxSecurity.com Team
• Jun 08, 2012

BSD Development's Influence on Linux Ecosystem and Open Source

On March 9, 1977, Bill Joy compiled the first version of Berkeley Systems Distribution Unix, known as 1BSD. This version was just an add-on to an existing Unix, however. Two years later, he released 2BSD, which added two new programs from his repertoire: vi and the C Shell.

• LinuxSecurity.com Team
• Apr 19, 2012

Debunking Security Myths: Is Linux Safer Than Other Platforms?

The Mac platform now finds itself in the crosshairs of malware developers along with Windows, but that isn't a reason to switch to Linux.

• LinuxSecurity.com Team
• Apr 17, 2012

Hardening Linux Server Configuration: Disable Root Login & Use SFTP

There are a few things you need to always remember when setting up a new Linux server. By default the root login is enabled for most systems. The best practice is to disable root login. Also, if you are transferring files via FTP, the best way to do this securely is via SFTP (not FTP).

• LinuxSecurity.com Team
• Apr 16, 2012

Java Exploit In Mac OS X: Flashback Trojan Attack Overview

Apple is taking steps to address the Java vulnerabilities behind the Flashback Trojan outbreak. But Java isn't the only attack vector for OS X -- and Apple users can no longer cling to the belief that Macs are virtually immune to malware.

• LinuxSecurity.com Team
• Apr 16, 2012

Evaluating SSH Security: Alternatives To Port Knocking For Access Control

The robots currently at work knocking around for your guessable password could easily be repurposed to guess your Unicode password currently known as your port knocking sequence, and quite likely have been already. Plus, we already have authpf(8) for network-level restrictions on access.

• LinuxSecurity.com Team
• Apr 13, 2012

Exploring Effective Malware Protection Strategies For Linux

• LinuxSecurity.com Team
• Mar 28, 2012

NASA Website Blocked Due To DNSSEC Misconfiguration and Risks

The hazards of early DNSSEC adoption: A misconfiguration in NASA

• LinuxSecurity.com Team
• Jan 26, 2012

Disproving Common Myths About Antivirus in Ubuntu Linux Security

Security consultant: Users who don't run antivirus software on Linux

• LinuxSecurity.com Team
• Jan 17, 2012

Proxy Model for Database Security Threat Detection and Monitoring

The last database activity monitoring (DAM) model I want to address is the proxy model. This is the final installment of my trends series, following the business activity monitoring, ADMP and the policy driven security model.

• LinuxSecurity.com Team
• Dec 23, 2011

Mobile Device Security: Addressing Multicore Processor Threats

If hackers love one thing, it

• LinuxSecurity.com Team
• Dec 14, 2011

Advanced Evasion Techniques for Network Attacks: Key Insights

There are methods for attacking networks that even cutting-edge security systems cannot detect, and Advanced Evasion Techniques (AETs) are one example.

• LinuxSecurity.com Team
• Dec 07, 2011