Amazon.co.uk Review
In their introduction, the authors of
Linux System Security acknowledge that there's no magic bullet as far as security is concerned. Security-minded system administration is a process of constant revision. They promise, though, that "if you follow the procedures outlined in this book, you will certainly reduce your level of vulnerability". They deliver on that promise in spades. Using Red Hat Linux as their demonstration environment, the authors explain how to use a suite of publicly available tools to analyse, protect and monitor your machines and networks. They approach their subject from a practical standpoint, emphasising software and its use while referring the reader (with copious bibliographic notes) to more specialised works for more detailed information on cryptography, firewall configuration and other subjects.
Scott Mann and Ellen Mitchell have done excellent work in combining explanations of the "soft" aspects of security management with the particulars of using software. In a typical section, they explain how to acquire, install and run Crack, a password breaker. They first show how a bad guy would use Crack to gain unauthorised access to a machine over a network, then get into the "white hat" applications of the program as a security tool for pre-emptively weeding out weak passwords. More detailed coverage goes to tiger and Tripwire, a pair of powerful auditing and monitoring tools. Along with Maximum Linux Security (which covers more offensive and defensive weapons in less detail), this is one of the two best Linux security books you can own. --David Wall
Topics covered: Linux security practices and tools, as demonstrated under Red Hat Linux 5.2 and 6.0. Covered software and commands include Pluggable Authentication Modules (PAM), OPIE, syslog, sudo, xinetd, Secure Shell (SSH), Crack, tiger, Tripwire, The Cryptographic Filesystem (TCFS), and ipchains. The authors discuss administrative policies and procedures along the way.
--This text refers to an out of print or unavailable edition of this title.
Product Description
As more companies are moving to Linux for mission-critical applications, security becomes a major issue. This guide explains the pros and cons of the most the valuable open source security tools and is complete with implementation details. It gives detailed instructions on the implementation, configuration, and use of publicly available tools and features of Linux as they relate to Linux security. Essential background information is provided in the book's introductory chapters. Administrators will learn to: Prepare Linux systems for a production environment; Identify vulnerabilities, and planning for security administration; Configure Linux-based firewalls, authentication, and encryption; Secure filesystems, email, web servers, and other key applications; Protect mixed Linux/Unix and Windows environments. New to this Edition: Updated for Redhat 7.2; One of the first Linux security books to cover Bastille, a hardening program which tightens system security and can even lock down the entire system in cases where the system is seriously compromised; New chapter on network sniffers and port scanners used to detect intruders; Will Cover Open SSH - the new open source version of a popular suite of connectivity tools which allow you to login into remote computers and execute commands on these computers. Open SSH contains encryption capabilities that encrypts all traffic including passwords.
See all Product Description