Learning Guide for Linux Security
Learning Guide for Linux Security
Table of Contents
Making
sense of terms and acronyms
Getting
started: Linux Security at a glance
Best
practices: To do and not to do
Worst
case scenarios: When things went wrong
Security Tools
Intrusion
detection and prevention
Firewalls:
How-tos, tips and products
Remote
security: VPNs, wireless and more
Security
monitoring: Beyond intrusion detection
Security
management: Policies, tools and vigilance
Other
Resources -- bookmark these pages!
Making
sense of terms
and acronyms
- Buffer overflow
- Firewall
- Honey pot
- Intrusion detection
- Malware
- Packet
- Snort
- Trojan horse
- Virtual Private Network (VPN)
- Virus
- Virus hoax
- Worm
- SearchSecurity.com glossary
Getting started: Linux Security at a glance
- Featured Topic: Linux security -- Rising popularity = Increased risk
- Featured Topic: Is open source secure? (SearchSecurity.com)
- Article: Linux Security: Good Enough (eWEEK)
- Linux security primer (Lycos)
- Expert Advice: Most secure distribution of Linux (SearchSecurity.com)
- Article: Basic security tenets apply to open source programs too (SearchSecurity.com)
- Article: Is Linux security right for you? Expert offers guidance (SearchEnterpriseLinux.com)
- Desktop primer: My guide to Linux security (Rob Tougher -- Linux Gazette)
- Column: Trusted Linux? (Information Security)
- Bastille Hardening System
- Linux security FAQ (LinuxSelfHelp.com)
- White Paper: Securing Linux (Dell)
- Basic Hardening Linux (Linux Exposed)
Best practices: To do and not to do
- How To: Security quick start how-to for Linux (LDP how-to index)
- How To: Linux security how-to (LDP how-to index)
- Interview with Joe Grand: Hacking has its boundaries (SearchEnterpriseLinux.com)
- Article: Linux security -- the seven deadly sins (SearchEnterpriseLinux.com)
- Dos & don'ts: Smoothing out patch-management woes (SearchEnterpriseLinux.com)
- Article: Don't dismiss possibility of malicious code on Linux (SearchEnterpriseLinux.com)
- Webcast: Allocating your diminishing security resources (SearchSecurity.com)
- Article: Common security mistakes still haunt enterprises (SearchSecurity.com)
- Tip: What to do if you find a security problem (SearchSecurity.com)
Worst case scenarios: When things went wrong
- BlackBerry reveals bank's secrets (Wired)
- 'Disgruntled employee' hacks own company's computer system (Silicon.com)
- Virus hoaxes and the real dangers they pose (SecurityFocus)
- Bank "human error" opens e-mail addresses (ZDNet)
- Oops! True IT blooper #95: An alarming entry to the blooper zone (SearchWin2000.com)
- Hacker horror stories (SearchSecurity.com, excerpted from InformIT)
- Opinion: Surviving the Worst-Case Scenario (NewsFactor Network)
- How
to be a 'security warrior,' part 1
Security Warrior co-author Anton Chuvakin describes several useful security tools you can use to outfit your secure Linux enterprise, including Nessus, Bastille, and nmap. - Tip:
Vulnerability
scanning with Nessus
Learn how Nessus works. - Commentary: Addition
of IPsec locks down 2.6 kernel
Site expert Ken Milberg discusses the security improvements built into the 2.6 kernel -- most importantly, IPsec and Netfilter. - Free chapter download: Internet Protocol Security: IPsec -- Chapter 17 of Red Hat: The Complete Reference Enterprise Linux and Fedora Edition with DVD
- Administrator
tip: Netstat:
A small but powerful tool for administrators
Learn more about Netstat in this user-submitted tip. -
Expert webcast: How
to use open source tools to build a complete intrusion-detection system
In this webcast, Rafeeq Ur Rehman, author of Intrusion Detection with SNORT: Advanced IDS Techniques Using SNORT, Apache, MySQL, PHP, and ACID, teaches you how to build your intrusion-detection system. - Free chapter download: Using ACID and SnortSnarf with Snort -- Chapter 6 of Intrusion Detection with SNORT
- Products
& vendors: Intrusion
detection product guide
Intrusion detection and prevention
- Q&A: Nab hackers with Snort on Linux (SearchEnterpriseLinux.com)
- White paper: Using ACID and SnortSnarf with Snort (Prentice Hall PTR)
- How-to: Security quick start how-to for Linux (LDP how-to index)
- How-to: Snort setup (LDP how-to index)
- Expert Advice: Intrusion-detection system for Linux Red Hat (SearchSecurity.com)
- Article: Users not so ready to declare IDS dead (SearchSecurity.com)
- Article: Intrusion detection with Debian GNU/Linux (LinuxFocus)
- Honeypots: Simple, Cost-Effective Detection (SecurityFocus)
- How-to: Peering Over the Firewall -- Using Snort and a homemade read-only cable to follow network traffic (Linux Journal)
- News: Stumbler mapping networks for future attacks (SearchSecurity.com)
- Column: Detecting server compromises (Information Security)
- Article: How network intrusion prevention devices can -- and can't -- secure your network (Linux Security)
- Article: That network balancing act -- Keeping a clear view (SC Magazine)
- Product & vendor guide: Intrusion Detection/Forensics
Firewalls: How-tos, tips and products
- Expert Advice: How many firewall layers does my company need? (SearchEnterpriseLinux.com)
- Expert Advice: Can I really use a Linux server in place of a commercial firewall? (SearchEnterpriseLinux.com)
- Expert Advice: Resources on firewalls (SearchEnterpriseLinux.com)
- Expert Advice: Where can I learn more about setting up a firewall? (SearchNetworking.com)
- How-to: Firewall configuration prerequisites (Jay Beale, Bastille Linux Project)
- Tip: Where to put a firewall when using partitions (Search400.com)
- White Paper: Hardening the TCP/IP stack to SYN attacks (Security Focus)
- White Paper: Firewall Evolution: Deep packet inspection (Security Focus)
- White Paper: Linux firewall-related /proc entries (Security Focus)
- White Paper: Migrating services between firewall technologies (Andrew Barratt -- SANS Institute)
- Article: Building Firewalls with iptables, Part 1 (EarthWeb)
- News: Symantec offers firewall for Linux on the iSeries (Search400.com)
- How-to: Samba Authenticated Gateway HOWTO (LDP How-to Index)
- Article: Secure Installation of Apache Web Server (Linux Exposed)
- Tip: Choose the right firewall topology (SearchNetworking.com)
- IPCop firewall
- How-to: Linux Firewall download and installation (Projectfiles.com)
- Product & vendor guide: Firewall software products
- Product & vendor guide: Firewall services and resellers
- Product & vendor guide: Firewall appliances
- Firewall tips and articles(LinuxSecurity.com)
- Best Web Links: Firewalls
Remote security: VPNs, wireless and more
- Wireless apps get more powerful, but security is a concern
- Wireless security: Is WPA good enough?
- VPNs and wireless LANs
- Gateways for secure wireless access
- Linux-PAM (Pluggable Authentication Modules for Linux): A flexible mechanism for authenticating users
- Using PPTP or IPsec VPN tunnels for WLAN security/gateways
- Wireless LAN analyzers: The ultimate hacking tools?
- Diagnosing WLAN errors
- Wireless security overview
- Bolstering wireless LAN security
- Who's watching your wireless network?
- OpenSSH for remote security
- Linux VPN masquerade how-to
- Technology is not the only solution to wireless security
- Wireless Gone Wild: Time to Plan Your WLAN
- Introduction to FreeS/WAN for VPN, remote security
- Get expert advice about remote security. It's easy!
Security monitoring: Beyond intrusion detection
- Network security monitoring -- Going beyond intrusion detection
- Network security monitoring is more than IDS
- Stumbler mapping networks for future attacks
- Penetration testing
- Low-cost security tool: monitoring
- Network monitoring with Dsniff
- Security tools watch behavior to stop new threats
- SpamAssissin mail filter
- Mail Scanner (part of a complete free anti virus and spam proxy solution)
- Security monitoring software products
- Security monitoring services and resellers
- Security monitoring hardware products
- Get expert advice on security monitoring practices and tools for Linux
Security management: Policies, tools and vigilance
- How to be a security warrior, part 2
- Security hardening
- How to make security matter
- The real cost of cybersecurity
- Security auditing
- Developing a security awareness, training and education program for users
- Addressing security's people problem
- Building and implementing a successful security policy
- The next big thing: Vulnerability assessment
- Security Enhanced Linux
- SSL certificates how-to
- Linux IP Masquerade HOWTO
- Cisco networking simplified: policy management and security
- Protecting your Web servers: Is your security pukka?
- Tip: Web security benchmarks
- Securing servers: Vendors offer everything from common sense to rocket science
- Ways to open and close ports without a firewall
- Security management basics
- DNS how-to: Basic security options
- The security policy document library: E-mail policy
- Security policy for the real world: Physical security
- More about physical security
- Protecting the data center
- User identity management products
Other Resources
- Featured Topic: Security tool school (SearchEnterpriseLinux.com
- Can't find an answer to your security question? Ask John H. Terpstra
- Best Web Links: Securing Linux (SearchSecurity.com)
- White papers: Enterprise Linux security(SearchEnterpriseLinux.com)
Popularity: 6% [?]
Related Posts:





























