Server Security - Page 24 - Results from #460

Discover Server Security News

Linux vs. Windows: Analysts question assumptions about security, TCO

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Both Linux and Windows are here to stay. The decision to deploy a Linux or a Windows server should be based on a careful evaluation of both technical and business needs. For smaller companies with in-house Windows skills, moving to Linux or implementing Linux alongside Windows could cause more headaches and staff issues than value. For larger companies with sufficient staff and training budgets, implementing Linux-based servers may prove cost-effective in the long-term.

LinuxSecurity.com Team
Jun 22, 2005

Patch Management: Q&A with Thom Bailey

Patches are small, sometimes temporary “quick fixes

LinuxSecurity.com Team
Jun 21, 2005

Cutting Through the Linux Security Hype

Do you think there are security benefits businesses could reap by simply switching to open source solutions? Greenberg: Yes. A great number of security holes are because of Windows having glaring security holes in its browser and mail agent. Use Windows and Firefox, for example, instead of Windows and IE, and 80 percent of the security concerns vanish. The number of security threats in an OS-to-OS face off is about equal, from what I see. As — and if — Linux usage increases, the Linux threat level may increase.

LinuxSecurity.com Team
Jun 17, 2005

Integrating and securing Linux without a silver bullet

The difficulty in integrating Linux with legacy systems and securing IT systems are two of IT managers' most common complaints about Linux, says Peter Harrison, who canvassed many IT pros while writing The Linux Quick Fix Notebook, a new book from Prentice Hall PTR. In this tip, Harrison doesn't offer a quick fix, but he does offer sage advice about security and integration.

LinuxSecurity.com Team
Jun 10, 2005

Secure Mac and Linux authentication

CryptoCard (.com) makes a variety of secure authentication and ID management tools, and they just released support for OS X Tiger (they already did Panther). For the rest of you PC alternative fans, Linux support includes Red Hat, SuSE, and an easy compile option for Debian.

LinuxSecurity.com Team
Jun 08, 2005

An Introduction to Securing Linux with Apache, ProFTPd and Samba

While the vast majority of Linux users are hard-core techies, some may be using Linux because they want to try something new, are interested in the technology, or simply cannot afford or do not want to use Microsoft Windows.

LinuxSecurity.com Team
Jun 02, 2005

Linux Gains Maturity in the Data Center

Businesses certainly profit by using high-quality software that is freely available, and unencumbered by restrictive licensing, so they must keep an eye towards its sustainability. That might mean an occasional donation of equipment, funds, employees' time and know-how, whatever it is you have to offer.

LinuxSecurity.com Team
May 24, 2005

Security and the Linux process

In his latest entry, Dana asks whether the Linux process is insecure, because it’s not possible to warn the "vendor" before warning the general public about security flaws in Linux. He also notes that "Microsoft has theoretical control of this situation." There are several problems with this line of reasoning. I’m not going to argue that the open source model of development is perfect, but it offers several advantages over the proprietary model. Let’s start with the most obvious.

LinuxSecurity.com Team
May 19, 2005

Security query over Intel hyperthreading

Intel's hyperthreading technology could allow a hacker to steal security keys from a compromised server using a sophisticated timing attack, a researcher has warned. Hyperthreading allows software to take advantage of unused execution units in a processor. It essentially allows two separate processes, or software threads, to execute on a single processor at the same time, improving performance.

LinuxSecurity.com Team
May 17, 2005

Microsoft to support Linux

Microsoft head Steve Ballmer has promised to add Linux support for the first time in one of its products because, he explained, users need to manage heterogeneous networks. Support for the software giant's open-source rival and greatest threat will come in Virtual Server 2005 Service Pack 1, due to ship by the end of the year, Ballmer said as part of his keynote speech at the company’s annual summit.

LinuxSecurity.com Team
Apr 21, 2005

The Five Ps of Patch Management

Security and vulnerability patching has become one of the top concerns for IT managers, but has also left many IT teams fighting a losing battle as the job of patching competes with day-to-day system maintenance and security tasks.

LinuxSecurity.com Team
Apr 20, 2005

Configurations that keep your Linux System safe from attack

In this series of articles, learn how to plan, design, install, configure, and maintain systems running Linux in a secure way. In addition to a theoretical overview of security concepts, installation issues, and potential threats and their exploits, you'll also get practical advice on how to secure and harden a Linux-based system.

LinuxSecurity.com Team
Apr 20, 2005

US Government helps Bastille Linux gain assessment functionality

We've just finished adding a major new mission to Bastille Linux -- it now does hardening assessment! The US Government's TSWG helped us add this functionality. You can read about it in an interview I did with Jay Lyman, of Newsforge.

LinuxSecurity.com Team
Apr 20, 2005

Breaking software easier than you think

One reason software security vulnerabilities are so tough to fix is because they are so hard to find. Unlike other bugs that become apparent when an application acts up, security holes tend to hide from normal view. And that's just how the hacker underground likes it.

LinuxSecurity.com Team
Apr 15, 2005

Developers Rate Linux More Secure Than Windows In Survey

A new study addressing security issues finds that software-development managers generally rate Linux as a more secure operating system than Windows. The study, which will be released by the end of the month, was conducted by BZ Research, the research subsidiary of publisher BZ Media LLC. It was not funded by any vendors.

LinuxSecurity.com Team
Apr 14, 2005

Linux still seen as most secure

Microsoft's efforts to improve the security of Windows have paid off, leading to significant improvements in patch management and other areas, according to executives from North American companies surveyed by Yankee Group. The Linux-Windows 2005 TCO Comparison Survey, to be published in full in June, is based on responses from 509 companies of all sizes in markets such as healthcare, academia, financial services, legal, media, retail and government, Yankee Group said this week.

LinuxSecurity.com Team
Apr 07, 2005

Red Hat Patches Security Flaw

Enterprise Linux users should update their installations of XFree86 to remedy several security holes, some of which could allow attackers to take over a system. According to an advisory released by Red Hat affected operating systems include Enterprise Linux AS 3, Enterprise Linux ES 3 and Enterprise Linux WS 3.

LinuxSecurity.com Team
Apr 05, 2005

When will open source security grow up?

There are great open source products for nearly every purpose. But I have yet to find many in the security field. Most seem hand-written, based on books like the O’Reilly Secure Progrmaming Cookbook. Maybe I’m not looking hard enough. If I’m not, please point to your favorite open source security in TalkBack.

LinuxSecurity.com Team
Mar 29, 2005

Linux touted as the solution to online-banking problems

Australian company Cybersource says it's currently talking to two banks in Australia about providing Linux-based bootable CDs to consumers to ensure Internet banking security. The company yesterday released information about its Online Banking Coastguard solution. Coastguard is based upon Knoppix, a Linux distribution which boots entirely from CD and is known for its automatic hardware detection features. Cybersource has included Mozilla Firefox as the sole browser for Internet banking.

LinuxSecurity.com Team
Mar 24, 2005

Secure your server with LIDS

The Linux Intrusion Detection System (LIDS) is a kernel patch for both 2.4 and 2.6 kernels that adds Mandatory Access Control (MAC) and other security enhancements to the Linux kernel. The main feature of LIDS is its ability to limit the power of the root account. LIDS uses Access Control Lists (ACLs) to control access to files, processes, and network resources. Once these permissions are set, they cannot be overridden, even if a user or process has root privileges. You may be wondering why anyone would choose LIDS over its more popular counterpart, SELinux. Both have their advantages. Both add MAC and the ability to limit the damage that can be done by the root account. There are two reasons why you may want to consider LIDS instead of SELinux.

LinuxSecurity.com Team
Mar 21, 2005

Server Security - Page 24

Securing Your Linux Server: Understanding and Mitigating Modern Threats

Essential Server Security Security Strategies for Administrators

Ensuring Linux Server Security: A Comprehensive Guide