|
Presenting the Business Case for Open Source Software |
|
|
1 | (16) |
|
|
|
2 | (1) |
|
The Costs of Using Free Security Solutions |
|
|
2 | (3) |
|
|
|
2 | (1) |
|
|
|
3 | (1) |
|
|
|
3 | (1) |
|
|
|
4 | (1) |
|
The Savings of Using Free Security Solutions |
|
|
5 | (2) |
|
|
|
5 | (1) |
|
|
|
6 | (1) |
|
|
|
6 | (1) |
|
Comparing Free Solutions with Commercial Solutions |
|
|
7 | (6) |
|
Strengths of Free Solutions |
|
|
7 | (1) |
|
Weaknesses of Free Solutions |
|
|
8 | (2) |
|
Evaluating Individual Solutions |
|
|
10 | (3) |
|
``Selling'' a Free Solution |
|
|
13 | (2) |
|
|
|
13 | (1) |
|
|
|
14 | (1) |
|
|
|
15 | (1) |
|
|
|
15 | (1) |
|
Frequently Asked Questions |
|
|
16 | (1) |
|
Hardening the Operating System |
|
|
17 | (74) |
|
|
|
18 | (1) |
|
Updating the Operating System |
|
|
18 | (1) |
|
Red Hat Linux Errata and Update Service Packages |
|
|
18 | (1) |
|
Handling Maintenance Issues |
|
|
19 | (6) |
|
Red Hat Linux Errata: Fixes and Advisories |
|
|
20 | (3) |
|
|
|
23 | (2) |
|
Manually Disabling Unnecessary Services and Ports |
|
|
25 | (3) |
|
|
|
26 | (1) |
|
|
|
26 | (2) |
|
|
|
28 | (4) |
|
Well-Known and Registered Ports |
|
|
28 | (2) |
|
Determining Ports to Block |
|
|
30 | (1) |
|
|
|
30 | (1) |
|
|
|
31 | (1) |
|
Hardening the System with Bastille |
|
|
32 | (10) |
|
|
|
33 | (2) |
|
|
|
35 | (1) |
|
|
|
35 | (6) |
|
|
|
41 | (1) |
|
Controlling and Auditing Root Access with Sudo |
|
|
42 | (14) |
|
|
|
44 | (1) |
|
|
|
44 | (1) |
|
|
|
45 | (2) |
|
|
|
47 | (3) |
|
|
|
50 | (2) |
|
|
|
52 | (1) |
|
|
|
53 | (3) |
|
|
|
56 | (1) |
|
|
|
57 | (6) |
|
|
|
57 | (2) |
|
|
|
59 | (2) |
|
|
|
61 | (2) |
|
|
|
63 | (5) |
|
Securing Novell SUSE Linux |
|
|
68 | (6) |
|
|
|
72 | (2) |
|
|
|
74 | (3) |
|
Host Intrusion Prevention System |
|
|
77 | (2) |
|
|
|
79 | (5) |
|
|
|
84 | (1) |
|
|
|
85 | (4) |
|
Frequently Asked Questions |
|
|
89 | (2) |
|
Enumeration and Scanning Your Network |
|
|
91 | (30) |
|
|
|
92 | (1) |
|
|
|
92 | (1) |
|
|
|
92 | (2) |
|
|
|
94 | (4) |
|
|
|
94 | (2) |
|
Going Behind the Scenes with Enumeration |
|
|
96 | (1) |
|
|
|
96 | (1) |
|
|
|
97 | (1) |
|
|
|
97 | (1) |
|
|
|
98 | (21) |
|
|
|
98 | (1) |
|
|
|
98 | (5) |
|
|
|
103 | (1) |
|
|
|
103 | (1) |
|
|
|
104 | (2) |
|
|
|
106 | (1) |
|
|
|
106 | (6) |
|
Windows Enumeration: smbgetserverinfo/smbdumpusers |
|
|
112 | (4) |
|
|
|
116 | (3) |
|
Frequently Asked Questions |
|
|
119 | (2) |
|
Introducing Intrusion Detection and Snort |
|
|
121 | (36) |
|
|
|
122 | (1) |
|
|
|
123 | (3) |
|
What Will an IDS Do for Me? |
|
|
124 | (1) |
|
What Won't an IDS Do for Me? |
|
|
125 | (1) |
|
|
|
126 | (1) |
|
Snort System Requirements |
|
|
127 | (2) |
|
|
|
127 | (1) |
|
|
|
128 | (1) |
|
|
|
128 | (1) |
|
Exploring Snort's Features |
|
|
129 | (7) |
|
|
|
130 | (1) |
|
|
|
131 | (1) |
|
|
|
132 | (1) |
|
Alerting/Logging Component |
|
|
133 | (3) |
|
Using Snort on Your Network |
|
|
136 | (15) |
|
|
|
138 | (1) |
|
Using Snort as a Packet Sniffer and Logger |
|
|
138 | (5) |
|
|
|
143 | (1) |
|
Snort and Your Network Architecture |
|
|
143 | (4) |
|
Snort and Switched Networks |
|
|
147 | (2) |
|
Pitfalls When Running Snort |
|
|
149 | (1) |
|
|
|
150 | (1) |
|
|
|
150 | (1) |
|
Security Considerations with Snort |
|
|
151 | (3) |
|
Snort Is Susceptible to Attacks |
|
|
151 | (1) |
|
Securing Your Snort System |
|
|
152 | (2) |
|
|
|
154 | (1) |
|
|
|
154 | (2) |
|
Frequently Asked Questions |
|
|
156 | (1) |
|
Installing and Configuring Snort and Add-Ons |
|
|
157 | (24) |
|
|
|
158 | (2) |
|
Configuring Snort on Linux |
|
|
160 | (12) |
|
Configuring Snort Options |
|
|
160 | (5) |
|
Using a GUI Front-End for Snort |
|
|
165 | (1) |
|
Basic Analysis and Security Engine |
|
|
165 | (7) |
|
|
|
172 | (3) |
|
|
|
173 | (1) |
|
|
|
174 | (1) |
|
Demonstrating Effectiveness |
|
|
175 | (2) |
|
|
|
177 | (1) |
|
|
|
177 | (1) |
|
Frequently Asked Questions |
|
|
178 | (3) |
|
Advanced Snort Deployment |
|
|
181 | (22) |
|
|
|
182 | (1) |
|
|
|
182 | (1) |
|
|
|
182 | (1) |
|
Configuring Channel Bonding for Linux |
|
|
183 | (1) |
|
|
|
184 | (4) |
|
|
|
188 | (1) |
|
|
|
188 | (7) |
|
|
|
195 | (1) |
|
|
|
196 | (1) |
|
|
|
196 | (1) |
|
Solving Specific Security Requirements |
|
|
197 | (3) |
|
|
|
197 | (1) |
|
Catching Internal Policy Violators |
|
|
197 | (1) |
|
Banned IP Address Watchlists |
|
|
198 | (1) |
|
Network Operations Support |
|
|
198 | (1) |
|
Forensics and Incident Handling |
|
|
198 | (2) |
|
|
|
200 | (1) |
|
|
|
200 | (2) |
|
Frequently Asked Questions |
|
|
202 | (1) |
|
Network Analysis, Troubleshooting, and Packet Sniffing |
|
|
203 | (46) |
|
|
|
204 | (1) |
|
What Is Network Analysis and Sniffing? |
|
|
204 | (3) |
|
Who Uses Network Analysis? |
|
|
207 | (5) |
|
How Are Intruders Using Sniffers? |
|
|
207 | (2) |
|
What Does Sniffed Data Look Like? |
|
|
209 | (1) |
|
|
|
210 | (2) |
|
|
|
212 | (19) |
|
|
|
212 | (1) |
|
Understanding the Open Systems Interconnection Model |
|
|
213 | (2) |
|
|
|
215 | (1) |
|
|
|
215 | (2) |
|
|
|
217 | (1) |
|
|
|
218 | (2) |
|
|
|
220 | (1) |
|
|
|
221 | (1) |
|
|
|
221 | (2) |
|
|
|
223 | (1) |
|
The Major Protocols: IP, TCP, UDP, and ICMP |
|
|
224 | (1) |
|
|
|
224 | (1) |
|
Internet Control Message Protocol |
|
|
225 | (1) |
|
|
|
225 | (1) |
|
|
|
226 | (1) |
|
Hardware: Cable Taps, Hubs, and Switches |
|
|
226 | (2) |
|
|
|
228 | (1) |
|
|
|
229 | (2) |
|
|
|
231 | (2) |
|
|
|
231 | (1) |
|
|
|
232 | (1) |
|
|
|
233 | (6) |
|
|
|
233 | (2) |
|
|
|
235 | (1) |
|
|
|
236 | (2) |
|
|
|
238 | (1) |
|
Protecting Against Sniffers |
|
|
239 | (2) |
|
Network Analysis and Policy |
|
|
241 | (5) |
|
Frequently Asked Questions |
|
|
246 | (3) |
|
Basics of Cryptography and Encryption |
|
|
249 | (22) |
|
|
|
250 | (1) |
|
|
|
250 | (10) |
|
|
|
251 | (1) |
|
Symmetric Encryption Algorithms |
|
|
251 | (1) |
|
Data Encryption Standard and Triple Data Encryption Standard |
|
|
252 | (1) |
|
Advanced Encryption Standard (Rijndael) |
|
|
253 | (1) |
|
|
|
254 | (1) |
|
Asymmetric Encryption Algorithms |
|
|
255 | (1) |
|
|
|
256 | (1) |
|
|
|
257 | (1) |
|
|
|
258 | (1) |
|
|
|
258 | (2) |
|
Concepts of Using Cryptography |
|
|
260 | (7) |
|
|
|
261 | (1) |
|
|
|
262 | (1) |
|
|
|
263 | (1) |
|
|
|
263 | (2) |
|
|
|
265 | (1) |
|
|
|
265 | (1) |
|
|
|
265 | (1) |
|
|
|
265 | (2) |
|
|
|
267 | (1) |
|
|
|
267 | (2) |
|
Frequently Asked Questions |
|
|
269 | (2) |
|
Perimeter Security, DMZs, Remote Access, and VPNs |
|
|
271 | (70) |
|
|
|
272 | (1) |
|
|
|
272 | (2) |
|
|
|
274 | (4) |
|
|
|
274 | (2) |
|
|
|
276 | (1) |
|
|
|
277 | (1) |
|
|
|
278 | (47) |
|
Hardware versus Software Firewalls |
|
|
278 | (1) |
|
|
|
279 | (1) |
|
|
|
279 | (1) |
|
Choosing Installation Media |
|
|
279 | (3) |
|
|
|
282 | (5) |
|
|
|
287 | (11) |
|
|
|
298 | (18) |
|
|
|
316 | (9) |
|
Providing Secure Remote Access |
|
|
325 | (13) |
|
|
|
326 | (2) |
|
|
|
328 | (1) |
|
|
|
329 | (1) |
|
|
|
330 | (1) |
|
Using the X Window System |
|
|
331 | (7) |
|
|
|
338 | (1) |
|
|
|
338 | (2) |
|
Frequently Asked Questions |
|
|
340 | (1) |
|
|
|
341 | (42) |
|
|
|
342 | (1) |
|
|
|
342 | (4) |
|
|
|
343 | (1) |
|
|
|
343 | (1) |
|
Choosing Distribution Media |
|
|
344 | (1) |
|
Choosing a Specific Distribution |
|
|
345 | (1) |
|
Removing Optional Components |
|
|
346 | (7) |
|
|
|
347 | (2) |
|
Removing Optional Software |
|
|
349 | (3) |
|
Choosing a Window Manager |
|
|
352 | (1) |
|
|
|
353 | (9) |
|
Configure Automatic Time Synchronization |
|
|
353 | (2) |
|
|
|
355 | (1) |
|
Updating Software Packages |
|
|
355 | (1) |
|
|
|
356 | (1) |
|
|
|
357 | (1) |
|
SELinux Policy Development |
|
|
357 | (2) |
|
|
|
359 | (1) |
|
Automated Hardening Scripts |
|
|
360 | (2) |
|
Controlling Access to Resources |
|
|
362 | (4) |
|
Address-Based Access Control |
|
|
362 | (1) |
|
|
|
362 | (1) |
|
|
|
363 | (3) |
|
Auditing Access to Resources |
|
|
366 | (4) |
|
Enabling the Audit Daemon |
|
|
366 | (1) |
|
Enabling the Syslog Daemon |
|
|
367 | (1) |
|
Viewing and Managing the Logs |
|
|
368 | (1) |
|
|
|
368 | (1) |
|
|
|
369 | (1) |
|
|
|
370 | (3) |
|
|
|
371 | (1) |
|
|
|
372 | (1) |
|
Bastion Host Configurations |
|
|
373 | (6) |
|
|
|
373 | (1) |
|
Configuring an FTP Server |
|
|
374 | (2) |
|
Configuring an SMTP Relay Server |
|
|
376 | (1) |
|
|
|
377 | (2) |
|
Bastion Host Maintenance and Support |
|
|
379 | (1) |
|
Linux Bastion Host Checklist |
|
|
379 | (1) |
|
|
|
380 | (1) |
|
|
|
380 | (2) |
|
Frequently Asked Questions |
|
|
382 | (1) |
|
Apache Web Server Hardening |
|
|
383 | (20) |
|
|
|
|
Vulnerabilities Within Apache Web Server |
|
|
384 | (1) |
|
Poor Application Configuration |
|
|
384 | (1) |
|
|
|
384 | (1) |
|
Inherent Apache Security Flaws |
|
|
384 | (1) |
|
Foundational OS Vulnerabilities |
|
|
385 | (1) |
|
Patching and Securing the OS |
|
|
385 | (1) |
|
Patching Unix, Linux, and BSD Operating Systems |
|
|
386 | (1) |
|
Configuring a Secure Operating System |
|
|
386 | (1) |
|
Hardening the Apache Application |
|
|
386 | (14) |
|
Prepare the OS for Apache Web Server |
|
|
387 | (1) |
|
Acquire, Compile, and Install Apache Web Server Software |
|
|
388 | (1) |
|
Verify Source Code Integrity |
|
|
388 | (1) |
|
|
|
388 | (4) |
|
Configure the httpd.conf File |
|
|
392 | (1) |
|
Recommended modsecurity.conf File |
|
|
393 | (1) |
|
|
|
394 | (1) |
|
Performance/Denial-of-Service (DoS) Directives |
|
|
395 | (1) |
|
Server Software Obfuscation Directives |
|
|
396 | (1) |
|
Access Control Directives |
|
|
396 | (1) |
|
Authentication Mechanisms |
|
|
397 | (1) |
|
Directory Functionality Directives |
|
|
398 | (1) |
|
|
|
398 | (1) |
|
Remove Default/Unneeded Apache Files |
|
|
399 | (1) |
|
Update Ownership/Permissions |
|
|
400 | (1) |
|
Monitoring the Server for Secure Operation |
|
|
400 | (3) |
| Index |
|
403 | |