tailieunhanh - Unix for Security Professionals

Note that we are intentionally leaving out certain systems because they are too complicated to be appropriately handled in the time permitted. These services are covered in detail in courses from the SANS Unix Security curriculum: • NTP, Apache, DNS, and Sendmail are all covered in the Running Unix Applications Securely course (day four of the curriculum). • Topics in Unix Security (day three) spends half a day talking about SSH. • RPC-based applications (including NFS and NIS) and vulnerabilities are covered in more detail in the Common Unix Vulnerabilities class (day one) | Unix for Security Professionals Security Essentials The SANS Institute Unix Security - SANS 2001 1 All material in this course Copyright Hal Pomeranz and Deer Run Associates 2000-2001. All rights reserved. Hal Pomeranz Founder CEO hal@ Deer Run Associates PO Box 20370 Oakland CA 94620-0370 1 510-339-7740 voice 1 510-339-3941 fax http . com 5 - 1 Agenda A Brief History of Unix Booting Unix The Unix File System Manipulating Files and Directories Unix Privileges Unix Security - SANS 2001 2 This page intentionally left blank. 5 -2 Agenda cont. Unix Processes Networking System Services Unix Backups Wrap-up Unix Security - SANS 2001 3 This page intentionally left blank. 5 .