出自TWEmu.no-ip.org

目錄 1 使用手冊 2 規格 3 資源管控/權限限制 4 測試工具 5 網路過濾 6 即時監控 7 遠端簽證 8 事後鑑識 9 參考

使用手冊

• README
  • Gentoo Linux Security Guide
  • Debian Wiki - Hardening
  • Securing Debian Manual - Appendix G - Chroot environment for SSH
  • HardyServerSecurity
  • Build Security In Home - US-CERT
• WEB
  • LinuxSecurity.com
  • Shadowserver Foundation
• Software
  • 看雪軟件安全網站
  • Secure Programming for Linux and Unix HOWTO
  • SAMHAIN - host-based intrusion detection system
  • OSSF::自由軟體鑄造場(Open Source Software Foundry) - Security Tools
  • Acunetix Web Security Scanner
  • 深入 Linux PAM 體系結構 - IBM developerWorks 中國

規格

• Information security management system, Plan-Do-Check-Act

資源管控/權限限制

• Cfengine - a policy-based configuration management system
• atop - An advanced interactive monitor for Linux-systems to view the load on system-level and process-level.

測試工具

• Watchfire
• Webinspect
• Flawfinder / splint / RATS / findbug, 源碼檢測
• OpenVAS

網路過濾

• mod_security @ apache
• l7filter
• PSAD , 阻擋 DDOS
• arpalert , 防止 arp flood and poison

即時監控

• SNMP

遠端簽證

• SSL

事後鑑識

• Foremost
• Safecopy, dd 工具
• Disk Recover

參考

• 楊中皇老師「網路安全」參考資料
• Taiwan Honeynet Project
• iDefense Labs
• Database Management System in Google books