This year's BSDCon is being held at the Monterey Hyatt, in Monterey Ca. The first tutorial was a two-day tutorial covering BSD System Security. For the most part the classes are intensive and there was a lot of ground to cover. . . . . This year's BSDCon is being held at the Monterey Hyatt, in Monterey Ca. The first tutorial was a two-day tutorial covering BSD System Security. For the most part the classes are intensive and there was a lot of ground to cover. And attendees should have been fairly comfortable with at least one flavor of UNIX. However there was considerable mention of routers and their important role in overall network security. The topics covered where pretty comprehensive. Alan started with an outline of what is computer crime and then ended up with a quick guide to the latest script kiddie software. This, believe it or not, included running Nessus (a new script kiddie GUI program ) on our local network set up inside the hotel, which discovered a few hosts that where ripe for an attack. The link for this article located at BSD Today is no longer available. . Participants delved into BSD Security during this year's BSDCon held in Monterey, discussing subjects ranging from cybercrime to various security resources.. BSDCon Security, Network Protection, UNIX Security Techniques, Script Kiddie Tools. . Anthony Pell
It is a rare organization that has the money to deploy best of breed or integrated commercial software for every security role. Whether your job is perimeter protection, incident response or email server administration, there may be an opportunity to use your favorite Unix system with some additional tools to get the job done faster and cheaper than what you do now. . . .. After the reception my last column regarding the security criticism I heaped on Unix and Linux vendors who are pursuing end-user desktops, I thought I would outline some of the areas where I think Linux and Unix already have strong wins. While I am a dedicated Unix and Linux junkie and use it everywhere I can, I may be somewhat biased. However, there are some areas where Unix and Linux systems fit in better than anything else out there. In some cases, these roles can be performed on commercial Unix systems if your organization feels better about paying for commercial-grade software. The upcoming version of Solaris, for example seems to have some new security tricks that are worth a look if you need to run secure enterprise services. CD based OS - security in an insecure world Working in the security industry makes a person slightly paranoid. In my case, my paranoia goes far enough that I don't trust my own mother, or at least I don't trust her computer. The link for this article located at securityfocus is no longer available. . Unix/Linux systems are versatile and economical, excelling in security with advanced features, fine-grained user management, and a wide range of customizable tools. Unix Security Roles, Linux Applications, Security Management. . Anthony Pell
Is security through obscurity ever a useful way to protect your network, or does it just make things easier for corporate spies and hackers? This week in Unix Security, Carole Fennelly investigates who's benefiting from this security tactic. . . .. Is security through obscurity ever a useful way to protect your network, or does it just make things easier for corporate spies and hackers? This week in Unix Security, Carole Fennelly investigates who's benefiting from this security tactic. That accusation was leveled at me. I'd recommended that a client have internal headers stripped out of email at the firewall before that mail was being outside the company. I thought this was just good common sense. I even provided the technical solution to do it with the MTA the client was running (Sendmail). The admins balked and said, "No one does this." OK. So I asked the gods at Sendmail.org for guidance. To my surprise, they also felt it was unnecessary, even inadvisable. In fact, it was said that I was "paranoid" and relying on "security by obscurity." The link for this article located at SunWorld is no longer available. . Security through obscurity is the practice of keeping system details secret, believed to enhance safety by hiding vulnerabilities from attackers. Network Protection, Security Measures, Unix Defense. . Anthony Pell
Noel continues the story of when some Unix boxes that he helped admin were cracked. This article talks about some of the efforts made to track down the cracker and some surprises. This is the third part of the story . . .. Noel continues the story of when some Unix boxes that he helped admin were cracked. This article talks about some of the efforts made to track down the cracker and some surprises. This is the third part of the story of a community network that was cracked and what was done to recover from it. The first part Cracked! Part1: Denial and truth details the report that leads to the discovery that the community network was indeed cracked and some of the initial reactions. The second article Cracked! Part 2: Watching and Waiting talks about how they learned more about the cracker and what they did next. This article talks about some of the efforts made to track down the cracker and some surprises. The link for this article located at Rootprompt [LinuxToday] is no longer available. . Join Noel on an exhilarating journey as he hunts down those illegally accessing Unix systems, unraveling unexpected twists and turns throughout the investigative process.. Unix Security, Incident Tracking, Cyber Threat Management. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.