We work on the principle that if
you have done it you will understand it. Therefore do expect
this course to involve you a great deal in discussions, workshops
and especially examining the system hands on. By the end of the
course you will be familiar with using the UNIX terminal and running
UNIX commands. In particular, you will come to understand the
language surrounding UNIX and will gain immediate credibility
talking to the experts you will inevitably have to work with.
Furthermore, by understanding the technology the descriptions
of risk will become immediately understood.
This hands-on course is intended
for auditors and security specialists who are aware their businesses
use UNIX based products, but do not understand the operating system
platform and therefore the risks it may carry. You will learn
how UNIX is built and a concept of what the risks and capabilities
of the various areas are.
Hands on labs will show you how
to scan the system for objects, especially sensitive files and
directories. And to find out who can do what to them. Though the
course is taught from a SUN Solaris platform, the skills
and techniques you learn can be ported to any UNIX platform.
Pre-requisites
A general IT background is important.
You should feel comfortable typing line commands into a terminal.
As regards access to and working in UNIX, you will be shown how
to do this on the course.
Audience
Computer security and audit specialists
Project managers and other senior staff who require an overview
of UNIX and its security implications.
A general introduction to UNIX for technical specialists who may
be progressing to systems administration or shell programming.
Duration:
2 days
1
Introduction
The
popularity of UNIX
UNIX - key security risks
Security policy
The structure of the UNIX system
The user interface and command line
2
Processes
The
ps command
Daemon processes
Configuration files
The superuser
Sensitive utilities - cron, date/time, at
3
Startup and Shutdown
Shutdown
Booting UNIX
Inittab
rc scripts
fsck
4
The UNIX Filesystem
File
system structure
File permissions
Linked files
Locating and reading through UNIX files (find, grep, awk)
Access control lists
Controlling space usage
5
Managing users
Administering
users
The superuser
Logging in
Groups
Adding and deleting users
Password ageing
Profiles
Environment
Switch user
6
Management practices
UNIX
logs
Utmp and wtmp files
Switch user log - sulog
Caring for logs
Audit tools
7
Secure inter server working
Network
services
Security checks on sendmail
Securing inter-server working
System attacks
CERT alert - imapd vulnerability
FTP
X windows - denial of service attack
Printers