| Javascript Feeds RSS Feed Security Dashboard | SearchSecurity.com |
|
HP-UX
|
|
Linux
|
|
Microsoft
|
|
Router
|
|
Solaris
|
|
Operating Systems Security Considerations Operating Systems can be viewed as a resource manager, responsible for fair resource sharing between different processes in the system. On the other hand, Operating systems control access to application memory and scheduling of the processor. Applications must be run like OS-Level services and the developer of these apps does not know the level of details needed to develop secure applications on their own, If the OS isn’t doing these things securely, it generally compromise all security at higher levels, So The OS is a very logical place to enforce and support security. This paper presents the common built-in security criteria and mechanisms in OSs, it also introduces the common Vulnerabilities.
Mohammad Heidari,
07/16/2005
|
|
Enabling TCP Wrappers in Solaris 10 TCP Wrappers has been around for many, many years. It is used to restrict access to TCP services based on host name, IP address, network address, etc. For more detailed on what TCP Wrappers is and how you can use it, see tcpd(1M). TCP Wrappers was integrated into Solaris starting in Solaris 9 where both Solaris Secure Shell and inetd-based (streams, nowait) services were wrapped. Bonus points are awarded to anyone who knows why UDP services are not wrapped by default.
Glenn Brunette,
05/13/2005
|
|
Implementing and Maintaining AIX Security Policies This paper is meant to serve as an introductory guide to the basic security and server hardening functions present in AIX. Many of the features and functions shown throughout this guide are applicable to AIX 4.3 and above, but are more directed toward AIX 5.2. Since security is and will always remain a major issue in server environments, it is crucial that system administrators have a strong working knowledge of security policy implementation and hardening features. This knowledge can be applied to new systems, or to bring older systems up to date.
Andre Derek Protas,
03/25/2005
|
|
Middleware - Emerging Technologies and Its Controls Middleware technology is firmly entrenched in distributed computing horizon. It is enabler for enterprise application integration in today s state of business at the moment paradigm. While functional units across the enterprise may operate independently, middleware technology can be leveraged to provide integrated solution for better customer service and enhanced management information services.
By Naushad Rajani, 08/20/2004
|
|
Some of the Dangers of Connecting your AS/400 to a Network The AS/400 has evolved since its inception and with each change there have been associated security issues to resolve. The AS/400 in today’s networked computing environment has several inherent security exposures that should be addressed.
By Michael Walsh, 07/08/2004
|
|
Operating System Build Management in the Enterprise This paper discusses points to consider in creating system build policies and how to tackle both bringing systems into compliance and ensuring that they remain compliant.
By Duncan Beattie, 07/08/2004
|
|
Windows 2000 Built in Security Tools Windows NT has some excellent security tools and features built into the operating system. In addition the operating system provides tools for security policy and account management and the Windows NT security model is flexible and can support a wide range of configurations.
By Jeff Christman, 05/17/2004
|
|
A Step-by-Step Guide to Securing Windows 2000 for Use as an Internet Server Windows 2000 Server is the latest iteration of Microsoft's premier Network Operating System (NOS). Many advances in technology are built into this new version, not the least of which is the integration of Internet Information Services into the core of the Operating System (OS). Earlier versions of Windows NT have a somewhat functional version of IIS loaded on the CD with the software, but the version included with Windows 2000 is tightly integrated with the OS in an effort to posture Windows 2000 as a competitor in the Internet Server market.
By David S. Courington, 05/17/2004
|
|
Implementing a Windows 2000 Host Based Intrusion Detection System Overview of Intrusion Detection Systems (IDS). Intrusion Detection Systems detect possible intrusions of an organization's network. Attackers formulate strategies in an attempt to compromise one of the three components of Information Assurance (confidentiality, integrity, or availability). The desired result of an IDS implementation is to minimize time between detection and reaction to an intrusion. Two major forms of Intrusion Detection Systems exist: Host Intrusion Detection Systems (HIDS) and Network Intrusion Detection Systems (NIDS). HIDS and NIDS complement IT security and all organizations should consider using both forms of intrusion detection.
By Richard Springs, 05/17/2004
|
|
NetWare 4 and 5 Security Guide and Checklist This paper has two main parts. The first part is a collection of NetWare 4 and 5 security topics in the form of a guide. The second part is a checklist based on the guidance. The format of this paper is patterned after the SANS Step-by-Step guides and checklists, but for NetWare. Numerous references in the form of Internet addresses are contained throughout the body of the document. Some additional references are included in the endnotes at the end of the document.
By Mark Sanderson, 04/17/2004
|
|
Page: 1 23 |