|
"The best approach to system security is to think
like a hacker." __AOW
Secure
Shell
OpenSSH is the open source version of SSH. If properly used, SSH
provides a secure tunnel from two host computers. Regular TELNET and FTP
transmissions are vulnerable to network sniffing. Critical information
such as password travels in clear text format; any amateur hacker can
use available tools to sniff your transmission. In my case I installed SSH
server on my Linux box and use a client version on my Windows PC.
A tool called PuTTY
allows you to create a secure tunnel from Windows plateform.
Nmap Network Sniffer
This a very powerful network sniffer popular amongst hackers. It
allows you to detect security vulnerability in your system before the
bad guys do. GUI interface is available on Linux.
Tripwire
Intrusion Detection
This is by far my favorite security tool. It uses digital
fingerprints of files on a system and build a database. Every day it scans
the system for any changes or hidden file and sends a report to the
administrator. I have detected several break-ins with this tool.
SAINT Network
Tool
With a nice web interface, this tool also detects possible security
holes in a system.
L0pht AntiSniff
AntiSniff monitors a network for any host that is in promiscuous
mode. A host in such a state captures every packets on the
network; passwords may be acquired that way.
Bastille
Linux
If you have just installed Linux and want to harden it, this tool
will be a good choice. However make sure you record configuration
parameters you have selected. It may be handy when you want change
certain security features.
| SYSTEM
SECURITY
WEB SITES |
The goal of this list is to help administrators and computer users protect their system. Don't be tempted to use the
information for unethical purposes.---
© Copyright Amadou O. Wane
|
