Front cover - IBM Redbooks

To help with the hardening of IT systems, both servers and workstations, the
following additional references are useful for those who want to ensure that they
have applied all due diligence and have accessed the latest information
regarding this topic.
1. Microsoft Security (http://www.microsoft.com/security/):
– 7 Steps to Personal Computing Security
http://www.microsoft.com/security/articles/steps_default.asp
– Security Tools and Checklists
http://www.microsoft.com/technet/security/tools/tools.asp
2. Windows NT Security and Configuration Resources by the CERT
Coordination Center (http://www.cert.org/tech_tips/win-resources.html):
– Windows NT Configuration Guidelines
http://www.cert.org/tech_tips/win_configuration_guidelines.html
– Home Network Security
http://www.cert.org/tech_tips/home_networks.html
– Computer Virus Resources
http://www.cert.org/other_sources/viruses.html
3. Information Security Reading Room at SANS Institute
(http://www.sans.org/rr/index.php):
– Windows 2000 Issues
http://www.sans.org/rr/catindex.php?cat_id=66
These references are just a starting point. There are many additional sites on the
Web that have excellent information.
9.4 Hardening UNIX systems
In this section, we look at hardening UNIX servers. UNIX systems and Windows
systems are different enough that they require completely separate discussions.
In regard to UNIX, it has been said that the wonderful thing about standards is
there are so many to choose from. UNIX comes in a number of flavors, the two
predominant ones being BSD-derived and AT&T System V-derived. Some of the
specific implementations of UNIX in these two categories are:
► BSD-derived UNIX systems:
– OpenBSD
– FreeBSD
– NetBSD
– BSDi
Chapter 9. Server hardening 387