BASIC AIX S ECURITY - Circle4.com
10/16/20131BASICAIX SECURITYJaqui can be found at: IntroPermissionsChecklistsTools that can helpOpenSSL, OpenSSHTCP WrappersSnort, stunnelLogging, finding RootkitsIncident Handling and lawsAIX v6 and v7PowerSCQuestions210/16/20132SECURITYTY PESPhysicalLocalKeep system patched!!!Microcode/firmwareBIOS on HMC and consolesOperating SystemsFiles and filesystemsPasswordsKernelNetwork3LEVELS & TYPES OFATTACKSLevelsRoot access break-inReplacement of materialsDamage doneJust lookingTheft of proprietary informationDenial of serviceWorms and TrojansTypes Embarrassment (replace banners, home page, etc) Denial of service (syn-flood connections) Ping of Death Stealing proprietary code Pornography Harassment or threats -stalking Email Spam or bulk subscribes Hate mail Buffer Overflow410/16/20133SANS TOP10 VULNERABILITIES FROM2004 U1 BIND Domain Name System U2 Remote Procedure Calls (RPC) U3 Apache Web Server U4 General UNIX Authentication Accounts with No Passwords or Weak Passwords U5 Clear Text Services U6 Sendmail U7 Simple Network Management Protocol (SNMP) U8 Secure Shell (SSH)
10/16/2013 1 BASIC AIX S ECURITY Jaqui Lynch lynchj@forsythe.com Presentation can be found at: http://www.circle4.com/papers/aixsecurity-oct2013.pdf …
Download BASIC AIX S ECURITY - Circle4.com
Information
Domain:
Source:
Link to this page:
Please notify us if you found a problem with this document: