Linux Security

This course is intended for people who use Linux on a server and wish to take a pro-active approach to keeping a machine secure. It is assumed that you have configured a Linux machine as a server and are comfortable installing software from source and compiling custom kernels. You should be familiar with common administration practises.

Linux Security covers the following topics:

• Logging: What and where to log. Log summarisation and processing.
• Monitoring: What and how to monitor. Keeping attack surfaces small.
• Safe administration practices: Best practise for secure administration.
• Securing filesystems: Preventing filesystem-based compromises.
• Locking down services: Restricting network access, privilege separation, chroot'ing.
• Mitigating overflow attacks: Toolchain and library-based protection, kernel-based protection.
• Reducing information leaks: Toolchain and kernel-based protection.