Learning Guide for Linux Security
Linux Security is one of the most
important considerations in any enterprise IT shop, and there are so
many resources available it can be difficult to know where to
start. Techtarget.com has compiled the
following wealth of information in their Linux Security
Learning Guide. This will help get you up to speed
quickly with learning about and understanding Linux Security.
Getting started: Linux Security at a glance
Best practices: To do and not to do
Worst case scenarios: When things went wrong
Intrusion detection and prevention
Firewalls: How-tos, tips and products
Remote security: VPNs, wireless and more
Security monitoring: Beyond intrusion detection
Security management: Policies, tools and vigilance
Other Resources
Related Posts:
15 Linux eBooks Learning Guides for XML, XML Security, and Web Services Security 8 Free Programming Books: C++, C Sharp, Java, Linux 49 Computer and I.T. Books Freely Available Many Computer Ebooks and Online Books
Learning Guide for Linux Security
Table of Contents
Making
sense of terms and acronyms
Getting
started: Linux Security at a glance
Best
practices: To do and not to do
Worst
case scenarios: When things went wrong
Security Tools
Intrusion
detection and prevention
Firewalls:
How-tos, tips and products
Remote
security: VPNs, wireless and more
Security
monitoring: Beyond intrusion detection
Security
management: Policies, tools and vigilance
Other
Resources -- bookmark these pages!
Making
sense of terms
and acronyms
- Buffer overflow
- Firewall
- Honey pot
- Intrusion detection
- Malware
- Packet
- Snort
- Trojan horse
- Virtual Private Network (VPN)
- Virus
- Virus hoax
- Worm
- SearchSecurity.com glossary
Getting started: Linux Security at a glance
- Featured Topic: Linux security -- Rising popularity = Increased risk
- Featured Topic: Is open source secure? (SearchSecurity.com)
- Article: Linux Security: Good Enough (eWEEK)
- Linux security primer (Lycos)
- Expert Advice: Most secure distribution of Linux (SearchSecurity.com)
- Article: Basic security tenets apply to open source programs too (SearchSecurity.com)
- Article: Is Linux security right for you? Expert offers guidance (SearchEnterpriseLinux.com)
- Desktop primer: My guide to Linux security (Rob Tougher -- Linux Gazette)
- Column: Trusted Linux? (Information Security)
- Bastille Hardening System
- Linux security FAQ (LinuxSelfHelp.com)
- White Paper: Securing Linux (Dell)
- Basic Hardening Linux (Linux Exposed)
Best practices: To do and not to do
- How To: Security quick start how-to for Linux (LDP how-to index)
- How To: Linux security how-to (LDP how-to index)
- Interview with Joe Grand: Hacking has its boundaries (SearchEnterpriseLinux.com)
- Article: Linux security -- the seven deadly sins (SearchEnterpriseLinux.com)
- Dos & don'ts: Smoothing out patch-management woes (SearchEnterpriseLinux.com)
- Article: Don't dismiss possibility of malicious code on Linux (SearchEnterpriseLinux.com)
- Webcast: Allocating your diminishing security resources (SearchSecurity.com)
- Article: Common security mistakes still haunt enterprises (SearchSecurity.com)
- Tip: What to do if you find a security problem (SearchSecurity.com)
Worst case scenarios: When things went wrong
- BlackBerry reveals bank's secrets (Wired)
- 'Disgruntled employee' hacks own company's computer system (Silicon.com)
- Virus hoaxes and the real dangers they pose (SecurityFocus)
- Bank "human error" opens e-mail addresses (ZDNet)
- Oops! True IT blooper #95: An alarming entry to the blooper zone (SearchWin2000.com)
- Hacker horror stories (SearchSecurity.com, excerpted from InformIT)
- Opinion: Surviving the Worst-Case Scenario (NewsFactor Network)
- How
to be a 'security warrior,' part 1
Security Warrior co-author Anton Chuvakin describes several useful security tools you can use to outfit your secure Linux enterprise, including Nessus, Bastille, and nmap. - Tip:
Vulnerability
scanning with Nessus
Learn how Nessus works. - Commentary: Addition
of IPsec locks down 2.6 kernel
Site expert Ken Milberg discusses the security improvements built into the 2.6 kernel -- most importantly, IPsec and Netfilter. - Free chapter download: Internet Protocol Security: IPsec -- Chapter 17 of Red Hat: The Complete Reference Enterprise Linux and Fedora Edition with DVD
- Administrator
tip: Netstat:
A small but powerful tool for administrators
Learn more about Netstat in this user-submitted tip. -
Expert webcast: How
to use open source tools to build a complete intrusion-detection system
In this webcast, Rafeeq Ur Rehman, author of Intrusion Detection with SNORT: Advanced IDS Techniques Using SNORT, Apache, MySQL, PHP, and ACID, teaches you how to build your intrusion-detection system. - Free chapter download: Using ACID and SnortSnarf with Snort -- Chapter 6 of Intrusion Detection with SNORT
- Products
& vendors: Intrusion
detection product guide
Intrusion detection and prevention
- Q&A: Nab hackers with Snort on Linux (SearchEnterpriseLinux.com)
- White paper: Using ACID and SnortSnarf with Snort (Prentice Hall PTR)
- How-to: Security quick start how-to for Linux (LDP how-to index)
- How-to: Snort setup (LDP how-to index)
- Expert Advice: Intrusion-detection system for Linux Red Hat (SearchSecurity.com)
- Article: Users not so ready to declare IDS dead (SearchSecurity.com)
- Article: Intrusion detection with Debian GNU/Linux (LinuxFocus)
- Honeypots: Simple, Cost-Effective Detection (SecurityFocus)
- How-to: Peering Over the Firewall -- Using Snort and a homemade read-only cable to follow network traffic (Linux Journal)
- News: Stumbler mapping networks for future attacks (SearchSecurity.com)
- Column: Detecting server compromises (Information Security)
- Article: How network intrusion prevention devices can -- and can't -- secure your network (Linux Security)
- Article: That network balancing act -- Keeping a clear view (SC Magazine)
- Product & vendor guide: Intrusion Detection/Forensics
Firewalls: How-tos, tips and products
- Expert Advice: How many firewall layers does my company need? (SearchEnterpriseLinux.com)
- Expert Advice: Can I really use a Linux server in place of a commercial firewall? (SearchEnterpriseLinux.com)
- Expert Advice: Resources on firewalls (SearchEnterpriseLinux.com)
- Expert Advice: Where can I learn more about setting up a firewall? (SearchNetworking.com)
- How-to: Firewall configuration prerequisites (Jay Beale, Bastille Linux Project)
- Tip: Where to put a firewall when using partitions (Search400.com)
- White Paper: Hardening the TCP/IP stack to SYN attacks (Security Focus)
- White Paper: Firewall Evolution: Deep packet inspection (Security Focus)
- White Paper: Linux firewall-related /proc entries (Security Focus)
- White Paper: Migrating services between firewall technologies (Andrew Barratt -- SANS Institute)
- Article: Building Firewalls with iptables, Part 1 (EarthWeb)
- News: Symantec offers firewall for Linux on the iSeries (Search400.com)
- How-to: Samba Authenticated Gateway HOWTO (LDP How-to Index)
- Article: Secure Installation of Apache Web Server (Linux Exposed)
- Tip: Choose the right firewall topology (SearchNetworking.com)
- IPCop firewall
- How-to: Linux Firewall download and installation (Projectfiles.com)
- Product & vendor guide: Firewall software products
- Product & vendor guide: Firewall services and resellers
- Product & vendor guide: Firewall appliances
- Firewall tips and articles(LinuxSecurity.com)
- Best Web Links: Firewalls
Remote security: VPNs, wireless and more
- Wireless apps get more powerful, but security is a concern
- Wireless security: Is WPA good enough?
- VPNs and wireless LANs
- Gateways for secure wireless access
- Linux-PAM (Pluggable Authentication Modules for Linux): A flexible mechanism for authenticating users
- Using PPTP or IPsec VPN tunnels for WLAN security/gateways
- Wireless LAN analyzers: The ultimate hacking tools?
- Diagnosing WLAN errors
- Wireless security overview
- Bolstering wireless LAN security
- Who's watching your wireless network?
- OpenSSH for remote security
- Linux VPN masquerade how-to
- Technology is not the only solution to wireless security
- Wireless Gone Wild: Time to Plan Your WLAN
- Introduction to FreeS/WAN for VPN, remote security
- Get expert advice about remote security. It's easy!
Security monitoring: Beyond intrusion detection
- Network security monitoring -- Going beyond intrusion detection
- Network security monitoring is more than IDS
- Stumbler mapping networks for future attacks
- Penetration testing
- Low-cost security tool: monitoring
- Network monitoring with Dsniff
- Security tools watch behavior to stop new threats
- SpamAssissin mail filter
- Mail Scanner (part of a complete free anti virus and spam proxy solution)
- Security monitoring software products
- Security monitoring services and resellers
- Security monitoring hardware products
- Get expert advice on security monitoring practices and tools for Linux
Security management: Policies, tools and vigilance
- How to be a security warrior, part 2
- Security hardening
- How to make security matter
- The real cost of cybersecurity
- Security auditing
- Developing a security awareness, training and education program for users
- Addressing security's people problem
- Building and implementing a successful security policy
- The next big thing: Vulnerability assessment
- Security Enhanced Linux
- SSL certificates how-to
- Linux IP Masquerade HOWTO
- Cisco networking simplified: policy management and security
- Protecting your Web servers: Is your security pukka?
- Tip: Web security benchmarks
- Securing servers: Vendors offer everything from common sense to rocket science
- Ways to open and close ports without a firewall
- Security management basics
- DNS how-to: Basic security options
- The security policy document library: E-mail policy
- Security policy for the real world: Physical security
- More about physical security
- Protecting the data center
- User identity management products
Other Resources
- Featured Topic: Security tool school (SearchEnterpriseLinux.com
- Can't find an answer to your security question? Ask John H. Terpstra
- Best Web Links: Securing Linux (SearchSecurity.com)
- White papers: Enterprise Linux security(SearchEnterpriseLinux.com)
Popularity: 5% [?]
Related Posts: