Topic: Unix Security Testing........

 

Unix Security Testing

        Unix Security is an ongoing process. However, once the software is installed and initial checks completed, it can be a simple maintenance task of installing latest patches, verifying user accounts, running security software (and their extensions) and monitoring logs.

 

Always have latest Unix security OS patches installed

Subscribe to security mailing lists. Read security newsgroups. Keep up to date on the latest security procedures.

If you do NOT use NIS or NIS+, make your system a HP-UX trusted system for easier system security

Test your Unix system

Test w/ SATAN (network security), COPS (Various system checks), TIGER (ways for root to be compromised), and CRACK (password checker). Install Tripwire to detects changes to files).

Monitor log files

Check btmp, wtmp, syslog, sulog etc. regularly. Set up automatic email or paging to warn system administrators of any suspicious behavior. Also check your snort logs.