Server Security - Page 46 - Results from #900

Discover Server Security News

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 54

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 55

Securing Java Code: Cryptography And Compartmentalization Techniques

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

n this installment in our series, we further examine the elements that should be part of a secure Java code policy, including such safeguards as compartmentilization and cryptography. In our last installment, we introduced policy and covered product requirements, error handling, . . .

LinuxSecurity.com Team
May 03, 2001

BIND Chapter 11: Secure Your Nameserver With Essential Techniques

Chapter 11 of the new BIND book is now available online. This chapter covers securing your nameserver, transaction security, restricting queries and transfers, firewalls, and a number of security extensions. "Why should you care about DNS security? Why go to the . . .

LinuxSecurity.com Team
May 01, 2001

Understanding MySQL Access Control and Security Best Practices

Over the next few pages, I'm going to examine the mySQL access control system, and throw some light on the mySQL "grant tables". These tables, which are an integral part of the server's security system, offer database administrators a great deal . . .

LinuxSecurity.com Team
Apr 26, 2001

Exploring Buffer Overflows and Security Vulnerabilities in FTP Daemons

In this column, we look at buffer overflows in many FTP daemons, Oracle Application Server, Solaris ipcs, Solaris Xsun, and a whole list of programs in SCO OpenServers; temporary file race conditions in pine and pico; format string bugs in HylaFAX . . .

LinuxSecurity.com Team
Apr 22, 2001

Implement SSL Configuration for Apache on Unix-Based Systems

An excerpt from Chapter 3, "Security," of Apache: The Definitive Guide, 2nd Edition. Enable Apache to communicate securely over Secure Sockets Layer (SSL). Covers building, configuring, and securing an SSL-enabled Apache server under Unix.. . .

LinuxSecurity.com Team
Apr 17, 2001

FreeBSD Anti-Virus Setup: Sendmail Integration Guide for ISPs

This is a very nice add on for ISPs or someone that wants to safeguard all email coming into their system from viruses. The following article will walk you through installing and setting up several programs, to get this project done.. . .

LinuxSecurity.com Team
Apr 14, 2001

NSA And Network Associates Collaborate On SELinux Security Enhancements

The National Security Agency, the electronic snooping arm of the U.S. government, has enlisted computer security company Network Associates to help create a version of Linux that's less vulnerable to attack. The NSA awarded the two-year, $1.2 million contract to the . . .

LinuxSecurity.com Team
Apr 10, 2001

Flexibility And Security With Apache Web Server's suEXEC Module

One of the biggest problems for both Web hosting providers and clients is server security. How do you provide a flexible server environment for the client while maintaining some level of security? In this article, Jamie Wilson explains how the Apache Web server and the suEXEC module make that possible. . . .

LinuxSecurity.com Team
Mar 28, 2001

Innovative AI Applications for Network Attack Prevention Strategies

Unlike past attempts to manage security, these companies are concentrating on gathering real-time intelligence on attacks, vulnerabilities and exploits. Using data mining and artificial intelligence techniques, they can predict where problems could appear on a particular customer's network and then design . . .

LinuxSecurity.com Team
Mar 20, 2001

Updated SubSeven Backdoor Poses High Security Risk: Malware Alert

AN UPDATED VERSION of the backdoor program SubSeven was released by its creator, a hacker known as "mobman," on Friday, according to the "official" Web page of the program. The SubSeven backdoor, which allows malicious hackers to access and control a user's computer without his or her knowledge, is "one of the highest threats to Windows PCs, especially those running in broadband environments," said Chris Rouland, director of the X-Force research team at computer security firm Internet Security Systems (ISS) in Atlanta.. . .

LinuxSecurity.com Team
Mar 14, 2001

OS Security Trends Amidst Wireless Computing And Linux Growth

The microcomputer revolution empowered script kiddies and other, more inquisitive, barbarians to begin an onslaught against IT. With the advent of wireless computing and distributed operating systems, the dangers continue to evolve and to multiply. Often computer security takes us down . . .

LinuxSecurity.com Team
Mar 12, 2001

BIND Upgrade: BSD Experiences DoS Issues With 9.1.0 After Exploit Fix

A small number of users upgrading their Domain Name System (DNS) servers to guard against a major exploit in BIND have become entangled in a denial of service issue. The problem in updating from BIND (Berkeley Internet Name Domain) 4.9.x or . . .

LinuxSecurity.com Team
Mar 12, 2001

NSA Releases SE Linux: Insights on Security Architecture Evolution

In an uncharacteristic move, the U.S. National Security Agency recently released a security-enhanced version of Linux -- code and all -- to the open source community. This dW-exclusive article takes a first look at this unexpected development -- what it means . . .

LinuxSecurity.com Team
Mar 09, 2001

BIND Software Update: Critical Threats in Internet Security

Security experts recently made an unprecedented appeal to computer system administrators to update software to protect the Internet. The warning highlights the vulnerabilities of the digital era. Security flaws continue to be the Achilles Heel of the information revolution. There is . . .

LinuxSecurity.com Team
Mar 01, 2001

Implications Of NSA Secured Linux 2.2 For Open Source Security

That's sort of what I was feeling when I saw that the National Security Agency was releasing a secured version of Linux 2.2 into the "open source" community, along with the background on the testing models it used for verification. It . . .

LinuxSecurity.com Team
Feb 26, 2001

Linux Advisory: Java Runtime Critical Flaw Remote Code Execution

Sun Microsystems has revealed a security hole in several versions of a critical component of Java that could allow an attacker to run harmful programs on a victim's computer. The vulnerability appears in versions of the Java Runtime Environment that Sun . . .

LinuxSecurity.com Team
Feb 23, 2001

BIND 9 Security Review: Critical Issues Raised By D. J. Bernstein

This post by D. J. Bernstein, author of djbdns, a "secure" DNS server, wrote this message prompted by the recent problems experienced with BIND 9 and its "300000 lines of bad code." "BIND 9 is good code, you say? The BIND programmers learned their lesson from these security disasters and rewrote everything from scratch? Professor Bernstein's opinion differs. . .

LinuxSecurity.com Team
Feb 23, 2001

Maximize Internet Performance with Squid Proxy on Linux

These servers run the Squid proxy server software; this software is available under the GNU general public license. In brief, Squid provides for caching and/or forwarding requests for internet objects such as the data available via HTTP, FTP and gopher protocols. . . .

LinuxSecurity.com Team
Feb 22, 2001

Win2000 Security Review: Progress After One Year and Future Challenges

A year later, many security companies have had the chance to examine Win2K in detail. And hackers have had their shots at cracking it. So how have Redmond's promises of improved security stood up after this gimlet-eyed scrutiny? Surprisingly well. While . . .

LinuxSecurity.com Team
Feb 20, 2001

Proxomitron Beta Introduces SSL For Secure Client/Server Communication

Last week, I mentioned that the new beta version of Proxomitron, a local Web proxy, supports SSL. Let's look at how this works. Normally, Proxomitron works only with unencrypted traffic. It listens (by default) on port 8080. To relay traffic through . . .

LinuxSecurity.com Team
Feb 19, 2001

Community Poll

More Polls

Server Security - Page 46

Misuse of Cron Jobs for Long-Term Access in Linux Environments

Securing Remote Access to Linux Servers: Best Practices for 2026

Linux AI Tools Require Enhanced Observability for Security