Concentrika poppy

About us

audit and security

 

audit and security of Unix

 

About the course

We work on the principle that “if you have done it you will understand it”. Therefore do expect this course to involve you a great deal in discussions, workshops and especially examining the system hands on. By the end of the course you will be familiar with using the UNIX terminal and running UNIX commands. In particular, you will come to understand the language surrounding UNIX and will gain immediate credibility talking to the experts you will inevitably have to work with. Furthermore, by understanding the technology the descriptions of risk will become immediately understood.

This hands-on course is intended for auditors and security specialists who are aware their businesses use UNIX based products, but do not understand the operating system platform and therefore the risks it may carry. You will learn how UNIX is built and a concept of what the risks and capabilities of the various areas are.

Hands on labs will show you how to scan the system for objects, especially sensitive files and directories. And to find out who can do what to them. Though the course is taught from a SUN™ Solaris platform, the skills and techniques you learn can be ported to any UNIX platform.

Pre-requisites

A general IT background is important. You should feel comfortable typing line commands into a terminal. As regards access to and working in UNIX, you will be shown how to do this on the course.

Audience

Computer security and audit specialists
Project managers and other senior staff who require an overview of UNIX and its security implications.
A general introduction to UNIX for technical specialists who may be progressing to systems administration or shell programming.

Duration:

2 days

contents

1 Introduction

The popularity of UNIX
UNIX - key security risks
Security policy
The structure of the UNIX system
The user interface and command line

2 Processes

The ps command
Daemon processes
Configuration files
The superuser
Sensitive utilities - cron, date/time, at

3 Startup and Shutdown

Shutdown
Booting UNIX
Inittab
rc scripts
fsck

4 The UNIX Filesystem

File system structure
File permissions
Linked files
Locating and reading through UNIX files (find, grep, awk)
Access control lists
Controlling space usage

5 Managing users

Administering users
The superuser
Logging in
Groups
Adding and deleting users
Password ageing
Profiles
Environment
Switch user

6 Management practices

UNIX logs
Utmp and wtmp files
Switch user log - sulog
Caring for logs
Audit tools

7 Secure inter server working

 

Network services
Security checks on sendmail
Securing inter-server working
System attacks
CERT alert - imapd vulnerability
FTP
X windows - denial of service attack
Printers
8 Terminal monitor

Device files - tty
Terminal monitor
Ttymon - hacks and defences

9 System compromise - detection and response

Introduction
Configuration errors
Detecting compromise
Responding to a compromise
Network monitoring tools (Section on)
Security products - techniques used


 

 

 

Courses
schedule
Contact us