Linux/Unix System Security (top level)

List of terms

Building blocks of security

• CIA Building Blocks
• Random Number Generators
  • Stalling's RC4 introduction
  • RC4/PRNG Notes
• Outside information
  • The Code Book
  • BletchleyPark-cracking German codes in WWII
  • See links below to US-CERT and SANS....
    • Article - cyberthreat survey (2018)
    • Good advice - what to learn from the sony hack related to email

Linux/Unix topics related to security:

• Review from Sys Admin topics:
  • Access Control
  • User management
  • NAT-FW
• Ubuntu security overview
  • Security page
  • Default settings/features
• Authentication
• Encryption
  • Intro to command link encryption tools
  • enc (simple file encryptors, or try 'gpg -c filename')
  • crypt (DES crypto support)
  • gpg, open ssh (public key support)
  • encrypted password (salt)
• DoS
  • Tutorial: Raw sockets
  • Tutorial.....involving tcpdump, iptables, rawsockets
• Hacking
  • Kali Linux Distribution
    • Kali penetration tools
    • https://highon.coffee/blog/penetration-testing-tools-cheat-sheet/
    • Detailed guide for installing kali in VirtualBox

• Network/communications security
• IP Sec/VPN
• Perimeter security: NAT, firewalls
• Application specific
• Email
• TCP/SSL
• Web browsing: password protected pages and secure web pages
• SSH
• DNSSEC
  

Linux Tools related to security

• nmap
  • Secrets of Network Cartography
  • Beginners Guide
• metasploit
• Kali Linux Distribution
  • Kali penetration tools
  • Detailed guide for installing kali in VirtualBox
• OpenSSH

Additional sources of information

• US-CERT
• SANS - example articles
  • https://www.sans.org/the-seven-most-dangerous-new-attack-techniques
• Hardening Linux Articles
• ACM Queue : "The Seven Deadly Sins of Linux Security"
• SANs: Linux Security Checklist/audit
• 20 Linux Server Hardening Security Tips
• IBM's "Hardening the Linux Server"
• Usenix Security Conference
• 2014 
• 2015
• 2016
• 2017
  
  

last update: 4/22/2018