Linux Security 3-1-4
Linux Security 3-1-4
Proactive vs. Reactive Security Approach.LINUX ADVISORY WATCH:
This week, advisories were released for XFree86, the Linux kernel,
lbreakout2, mailman, synaesthesia, hsftp, pwlib, metamail, libxml2,
mtools, OpenSSL, mod_python, and libxml2. The distributors include
Conectiva, Debian, Fedora, Immunix, Mandrake, NetBSD, Red Hat, Suse,
Trustix, and Turbolinux.
>> Internet Productivity Suite: Open Source Security << Trust Internet Productivity Suites open source architecture to give you the best security and productivity applications available. Collaborating with thousands of developers, Guardian Digital security engineers implement the most technologically advanced ideas and methods into their design. Interview with Vincenzo Ciaglia, Founder of Netwosix - In this article, a brief introduction of Netwosix is given and the project founder Vincenzo Ciaglia is interviewed. Netwosix is light Linux distribution for system administrators and advanced users. Guardian Digital Launches Next Generation EnGarde Secure Linux Guardian Digital, Inc., the world's premier open source security company, announced an update to the next generation, award-winning platform that delivers features designed to ease the process of building a complete Internet presence and the level of security necessary to prevent system compromise. EnGarde Secure Linux leverages the best open source applications available to provide secure Internet connectivity, user privacy, Web and email functions, and intrusion detection. Host Security News: How to be a 'security warrior,' part 2 No soldier goes into battle without training. But once he's in the trenches, he sometimes has to rely on skills he didn't learn in boot camp. The same goes for today's security admins, many of whom are new to Linux or even security administration. The Web Application Security Consortium The Web Application Security Consortium is a group of top security experts dedicated to developing and promoting standards of best practice for the World Wide Web. Rising to meet the challenges of web security, the Consortium will focus its efforts to assist application developers, security professionals, and software vendors through collaborative effort. more. How to be a 'security warrior,' part 1 In computer warfare, security admins must go into battle riding on a strong vehicle and armed with effective tools, according to security expert Anton Chuvakin. Fortunately, the security warrior who's protecting Linux has both. Three Security Flaws Found in Linux Security experts have warned that three separate security flaws in Linux have been identified that could allow a user to gain control over a Linux server or workstation, according to a report published Friday in Silion.com. The report said the flaws affects all current versions of Linux. Network Security News: A Bio Approach to Network Security Active Countermeasures models the human body's immune reaction to invasion by microbes. It runs a periodic vulnerability analysis based on the latest advisories from security monitoring organizations such as CERT, prioritizes the threats, scans the network for vulnerable machines, then automatically deploys a payload of prevention. Improving Passive Packet Capture: Beyond Device Polling (Updated) Many network monitoring tools are based on passive packet capture. The principle is the following: the tool passively captures packets flowing on the network and analyzes them in order to compute traffic statistics and reports including network protocols being used, communication problems, network security and bandwidth usage. General Security News: Simple Optics Make Quantum Relay Quantum cryptography devices and networks, which transport photons whose properties can be used to represent the 1s and 0s of digital information, could also benefit from repeaters. Today's prototype quantum cryptography systems provide theoretically perfect security, but these systems can't carry information over long distances. Linux Gets Security Boost from NSA Most stories about government deployments of Linux involve a distributor helping various federal and municipal agencies install the open source operating system. But in this case, a federal agency is helping Linux. RSA Panel: Cryptography Can't Foil Human Weakness Enhanced security can solve many issues, but it can't improve the thing that sits between the keyboard and the chair--the user--a cryptographers' panel concluded Tuesday. The Proactive vs. Reactive Security Approach To tailor security properly, there has to be a healthy mix of techniques, starting with proactive tactics such as installing firewalls, deciding on an intrusion detection system, considering hosted applications, and tinkering with network security options. In the mix are also reactive options such as data recovery, antiviral patches, and frequent security updates to applications and hardware.
