This highly technical course focuses on properly securing machines running the Linux operating systems. A broad range of general security techniques such as packet filtering, password policies, and file integrity checking are covered. Advanced security technologies such as Kerberos and SELinux are taught. Special attention is given to securing commonly deployed network services.
At the end of the course, students will have an excellent understanding of the potential security vulnerabilities – know how to audit existing machines, and how to securely deploy new network services.
Module 1: SECURITY CONCEPTS
Module 2: SCANNING, PROBING, AND MAPPING VULNERABILITIES
Module 3: PASSWORD SECURITY AND PAM
Module 4: SECURE NETWORK TIME PROTOCOL (NTP)
Module 5: KERBEROS CONCEPTS AND COMPONENTS
Module 6: IMPLEMENTING KERBEROS
Module 7: ADMINISTERING AND USING KERBEROS
Module 8: SECURING THE FILESYSTEM
Module 9: AIDE
Module 10: ACCOUNTABILITY WITH KERNEL AUDITD
Module 11: SELINUX
Module 12: SECURING APACHE
Module 13: SECURING POSTGRESQL
Module A: SECURING EMAIL SYSTEMS
This class covers advanced security topics and is intended for experienced systems administrators. Candidates should have current Linux or UNIX systems administration experience equivalent to the Linux Fundamentals, Enterprise Linux Systems Administration, and Enterprise Linux Network Services courses.