Auditing UNIX
Hardening the operating system is the first, and one of the most fundamental, steps in ensuring that mission critical information is adequately protected on an organization's systems. This course will provide a detailed understanding of the security features and configuration settings of the UNIX operating system. During the seminar, we will outline a process for reviewing and auditing the security of UNIX systems to ensure that appropriate countermeasures are in place to protect against common UNIX vulnerabilities, threats, and exploits.
The seminar will be focused on Sun Solaris, one of the dominant UNIX variants for mission critical systems that would most often be encountered by an IT Auditor. The seminar will focus on general purpose Solaris configuration issues as well as some optional security features and tools that may be appropriate for highly secure environments, and considers versions up through Solaris 9, as well as some of the key features of Solaris 10. Finally, the seminar will identify and discuss specific audit procedures for reviewing and evaluating the security of Sun Solaris UNIX installations.
Even though the course uses Solaris as the primary focus, the information is applicable to almost all versions of UNIX. Additional resources for Linux and AIX are provided to supplement the primary material.
Audience: IT Audit professionals and others tasked with evaluating controls over UNIX-based systems.
Prerequisites: A basic understanding of UNIX and general IT concepts
Outline:
* Introduction to UNIX and Solaris
* Users and Groups
* Authentication
* File System and File Permissions
* System Startup and User Initialization
* Internetworking: NFS and Trust
* Network Services
* Logging
* Other Security Controls
* Monitoring
Seminar Duration: 2 days (15 CPEs). This course earns 15 CPEs based on the standard 50-minute hour calculation used by many professional organizations.
Price: $1200
Discounts are available for multiple attendees. Save even more by having training conducted onsite for your ogranization. Contact us for further information.