SECURITY 401 - Day 6

Linux Security

Saturday, October 9, 2010 : 9am - 5pm
Stephen Sims, SANS Certified Instructor
6 CPE Credits

Please note that some course material for SEC 401 and MGT 512 may overlap. We recommend SEC 401 for those interested in a more technical course of study, and MGT 512 for those primarily interested in a leadership-oriented but less technical learning experience.
This course prepares you for the GSEC certification which meets the requirement of the DoD 8570 IAT Level 2.

Based on industry consensus standards, this course provides step-by-step guidance on improving the security of any Linux system. The course combines practical "how to" instructions with background information for Linux beginners and security advice and "best practices" for administrators of all levels of expertise.
  • Linux Landscape
    • Different variants of and uses for Linux
    • Ways processes are started
    • Network Interface Information
    • Process Information
    • Directory Hierarchy
    • Mounting the file systems
  • Linux Command Line
    • Command line essentials
    • Logging in
    • File system commands
    • Critical OS Tools
    • Getting help with man
    • Basic shell scripting
    • Regular expressions
  • Virtual Machines
    • Types of virtual machines
    • What are virtual machines and how they work
    • Controlling Virtual Machines
    • Installing VMWare Tools
    • Configuration & Networking Options
    • Problems with virtual machine networking
  • Linux OS Security
    • Dangerous Services
    • Helpful services
    • Running & stopping programs
    • Configuration changes and restarting services
    • File system permissions, ownership & systems
    • Mounting Drives
  • Linux Security Tools
    • File Integrity Verifications
    • Chkrootkit
    • CIS Hardening Guides
    • Bastille Linux
    • Sniffers
    • Snort
  • Maintenance, Monitoring and Auditing Linux
    • Common causes of compromise
    • Patching
    • Backing up data
    • Syslog
    • Analyzing log files
    • Other logging