IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Hardware & Software Remarks
____________________________________________________________________ .........................................
- SATAN
This public domain program enables the network security to be analysed. It
checks networked UNIX systems for known deficiencies which have often
not been eliminated.
- BSI secure UNIX administration tool (USEIT)
USEIT was developed by the BSI to enable System Administrators to
automatically check the security settings of a UNIX system with a tool.
Checks of the consistency of system files and of the system itself are
performed, password strength is checked and insecure processes are
identified. Checksums of files and file attributes are generated and
checked. Network security is reviewed and penetration testing can be
performed. Insecure ports and services are checked. Logging is monitored.
Checks of imported manufacturer's patches and of relevant CERT
publications are performed. Further information on USEIT can be obtained
from the IT baseline protection CD.
- crack
With this public domain program, a check is made of whether the existing
passwords are too simple and can be easily guessed.
Additional controls:
- Are the performance and results of such security checks documented?
- Which vulnerabilities are checked by means of the programs and shell
scripts used?
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000