Server Security - Page 45 - Results from #880

Discover Server Security News

Securing Linux: Part 2

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Trevor Warren writes: "This second article in the series takes you through TCP wrappers, OpenSSH, disabling unnecessary services and better monitoring of system activity by using unique log files to monitor specific information."

LinuxSecurity.com Team
Jan 15, 2001

File transfer options -- Part I: Secure iXplorer

This is the first-part in a series of articles about different options for secure file transfers. I won't cover how to sniff connections, steal passwords or if SSH is really "secure". But hopefully, I can provide some information that will be . . .

LinuxSecurity.com Team
Jan 14, 2001

Security is out of step with ebusiness

Fewer than half of blue-chip companies believe that their ebusiness and security strategies are effectively coordinated. Business managers are guilty of demanding ebusiness at all costs and security is overlooked, according to research by analyst group Xephon. . . .

LinuxSecurity.com Team
Jan 12, 2001

Security hole found in Borland database

Borland's InterBase database software contains a "back door" that allows anyone with the appropriate password to wreak major havoc with the database and the computer it's running on, security experts said. A back door is an undocumented way to get access . . .

LinuxSecurity.com Team
Jan 11, 2001

Feds unveil 'security-enhanced' Linux prototype

The U.S. National Security Agency last week publicly released a prototype "security-enhanced Linux" operating system, hoping to attract the developer community to find ways to improve Linux security for business and governmental uses. So how is the developer community reacting so . . .

LinuxSecurity.com Team
Jan 10, 2001

Websites warned over first hypertext virus

A potential threat to ecommerce sites has been identified with the discovery of the first virus using the hypertext preprocessor (PHP) scripting language. PHP is one of the most popular scripting languages and is used to develop ecommerce sites and those . . .

LinuxSecurity.com Team
Jan 10, 2001

NT still most hacked web server platform

This article, based on a recent attrition.org report, doesn't mention how many hacked sites were due to default passwords, poor administration, etc. The numbers couldn't possibly be not telling the whole story now, could they. "The year 2000 saw Windows NT . . .

LinuxSecurity.com Team
Jan 09, 2001

Penguins running wild [Linux in e-business]

Don't look now, but e-business is growing webbed feet. E-commerce, e-procurement networks, B2B partnerships, e-marketplaces--they're all ripe for exploitation by Linux, the upstart OS sporting the penguin logo. Linux is already a force in Web serving, Internet security and e-mail, both . . .

LinuxSecurity.com Team
Jan 02, 2001

Group crafts rating system for server security

The newly formed Center for Internet Security hopes to answer that question by creating a suite of tests that would give computer owners a rating--on a scale of 1 to 10--of how good their security is. A level-10 server could protect . . .

LinuxSecurity.com Team
Dec 22, 2000

OpenBSD exploit gets serious

An esoteric buffer overflow bug in OpenBSD has been upgraded in importance after it was discovered that, in certain conditions, it could allow a cracker to gain remote access to a server. Users are recommended to apply a patch to fix . . .

LinuxSecurity.com Team
Dec 20, 2000

25 Ways to make your webserver more secure

25 Ways to make your webserver more secure is a simple and short text that contains some principles to get a real world secure server.

LinuxSecurity.com Team
Dec 18, 2000

OS identification

When hackers plan to break into Websites, they first try to find out which operating system the site is using. Once they determines that and which services are running, their chances of successfully attacking a system are greatly increased. What can . . .

LinuxSecurity.com Team
Dec 14, 2000

Interview with BSDi on proactive BSD/OS security

BSD/OS is often considered a "secure" operating system. I often see ISPs and website hosting companies prominently brag that their servers are secure because they run BSDi's operating system. BSDi itself often promotes itself by saying it continues the BSD tradition . . .

LinuxSecurity.com Team
Dec 13, 2000

Installing a secure web server

With ``e-commerce'' becoming an important part of many businesses, it's useful to know how to set up your server to run SSL for secure transfer of sensitive information. This article starts with a description of SSL and talks about implementing OpenSSL.. . .

LinuxSecurity.com Team
Dec 12, 2000

Rule Set Based Access Control (RSBAC) for Linux version 1.1.0

RSBAC is an open source security extension for current Linux kernels. It is based on the Generalized Framework for Access Control (GFAC) by Abrams and LaPadula and provides a flexible system of access control based on several modules.. . .

LinuxSecurity.com Team
Dec 11, 2000

ISC DHCPD

There is practically no information available online regarding DHCP security. This is odd, considering the ubiquity of DHCP servers on most networks. Unlike BIND, the ISC DHCP server does not have command line options to chroot the . . .

LinuxSecurity.com Team
Nov 30, 2000

OpenSSH installation and configuration

Secure Shell (SSH) was built to address these faults and provide a more secure environment to work in. SSH encrypts all your traffic including your passwords when you connect to another machine over the net. SSH also replaces telnet, ftp, rsh, . . .

LinuxSecurity.com Team
Nov 21, 2000

How Companies Can Enhance Web Security

With the peak online holiday buying season just around the corner, Internet security experts are urging U.S. companies to enhance their security posture in light of recent threats made by hacker groups in the Middle East to launch an electronic holy . . .

LinuxSecurity.com Team
Nov 14, 2000

ISC Releases BIND 8.2.2 Patch 7

ISC has discovered (or has been notified of) eight bugs which can result in vulnerabilities of varying levels of severity in BIND as distributed by ISC. Upgrading to BIND version 8.2.2 patchlevel 7, or higher, is strongly recommended for all users . . .

LinuxSecurity.com Team
Nov 10, 2000

Stopping Spam and Trojan Horses with BSD

Here's a great guide to reducing the risk of spam using sendmail. Additional information includes DNS blacklists, spam filters and procmail, securing identd, and more. "A properly configured BSD mail server can protect users from spam and Trojan horses while rejecting . . .

LinuxSecurity.com Team
Nov 10, 2000

Server Security - Page 45

Securing Your Linux Server: Understanding and Mitigating Modern Threats

Essential Server Security Security Strategies for Administrators

Ensuring Linux Server Security: A Comprehensive Guide