Linux Security Fundamentals

Includes one year of FREE access after activation to the online test bank and study tools: • Custom practice exam • 100 electronic flashcards • Searchable key term glossary The SybexTM method for teaching Linux® security concepts. Understanding Linux Security is essential for administration professionals. Linux Security Fundamentals covers all the IT security basics to help active and aspiring admins respond successfully to the modern threat landscape. You'll improve your ability to combat major security threats against computer systems, networks, and services. You'll discover how to prevent and mitigate attacks against personal devices and how to encrypt secure data transfers through networks, storage devices, or the cloud. Linux Security Fundamentals teaches: • Using Digital Resources Responsibly • What Vulnerabilities and Threats Are • Controlling Access to Your Assets • Controlling Network Connections • Encrypting Data, Whether at Rest or Moving • Risk Assessment • Configuring System Backups and Monitoring • Resource Isolation Design Patterns Interactive learning environment: Take your skills to the next level with Sybex's superior interactive online study tools. To access our learning environment, simply visit www.wiley.com/go/sybextestprep, register your book to receive your unique PIN, and instantly gain one year of FREE access to: • Interactive test bank with a practice exam to help you identify areas where you need to expand your knowledge • 100 electronic flashcards to reinforce what you've learned • Comprehensive glossary in PDF format gives you instant access to key terms you use in your job Linux® Security Fundamentals Acknowledgments About the Author About the Technical Editor Contents Contents Introduction What Does This Book Cover? Interactive Online Learning Environment and Test Bank Chapter 1 Using Digital Resources Responsibly Protecting Personal Rights Protecting Digital Privacy What Is Personal Data? Where Might My Personal Data Be Hanging Out? What Are My Responsibilities as a Site Administrator? Can Escaped Genies Be Forced Back into Their Bottles? What Can I Do as a User? Establishing Authenticity Think About the Source Be Aware of Common Threat Categories Summary Back to the Basics Review Questions Chapter 2 What Are Vulnerabilities and Threats? The Basics: What Are We Trying to Accomplish Here? What Are Vulnerabilities and Threats? What Can Be Exploited? Who’s Doing the Exploiting? Why Do They Attack? Common Vulnerabilities Software Vulnerabilities Hardware Vulnerabilities Bioware Vulnerabilities Digital Espionage USB Devices Backdoors Wireless Entry Points Stolen Credentials Data Breaches Identity Theft (Besides Breaches) Malware Network-Based Attacks Man-in-the-Middle Attacks Denial-of-Service and Distributed Denial-of-Service Attacks Network Routing Attacks Summary Back to the Basics Review Questions Chapter 3 Controlling Access to Your Assets Controlling Physical Access Understanding Your Devices Protecting Your Devices Managing Authentication Through Effective Password Use Managing Authorization Through Permissions Controlling Network Access Firewalls Virus and Malware Protection Educating Your Users Controlling Software Sources PC Software Repositories Mobile Package Management Summary Back to the Basics Review Questions Chapter 4 Controlling Network Connections Understanding Network Architecture The Transmission Control Protocol The Internet Protocol Understanding the Domain Name System Auditing Networks Network Auditing Tools Automating Audits Securing Networks Patch Your Software Physically Secure Your Infrastructure Secure Your Network Behavior Other Stuff Summary Back to the Basics Review Questions Chapter 5 Encrypting Your Data at Rest What Is Encryption? Encryption Usage Patterns What Should You Encrypt? Understanding Hashing vs. Encryption What Are Blockchains? Encryption Technologies Summary Back to the Basics Review Questions Chapter 6 Encrypting Your Moving Data Website Encryption Why You Should Use Encryption How Website Encryption Works Generating Certificates Email Encryption GNU Privacy Guard Does Gmail Encrypt Your Emails? Working with VPN Connections and Software Repositories Securing Your Actions Using VPNs Securing Transfers from Software Repositories Summary Back to the Basics Review Questions Chapter 7 Risk Assessment Conducting Open Source Intelligence Gathering Accessing Public Vulnerability Databases Vulnerability Data Frameworks Vulnerability Data Formats Vulnerability Data Metrics Vulnerability Data Management Tools Conducting Vulnerability Scans Conducting Penetration Tests Attack Vectors Tooling Frameworks Follow-Up Summary Back to the Basics Review Questions Chapter 8 Configuring System Backups and Monitoring Why You Need to Get Backups Right the First Time Appreciating the Risks Spreading Your Backups Across Multiple Sites Testing Your Backups Meeting Regulatory Compliance Backup Types Incremental Backups Differential Backups Backup Life Cycles Multitier Backups Multisite Storage Solutions Disaster Recovery Planning Configuring Monitoring and Alerts Working with System Logs Intrusion Detection Summary Back to the Basics Review Questions Chapter 9 Resource Isolation Design Patterns Configuring Network Firewalling Balancing Public and Private Networks Building Isolated Development Environments Working with Sandbox Environments Use Cases for Sandboxes Sandbox Designs Controlling Local System Access Configuring Mandatory Access Controls Setting Usage Quotas Summary Back to the Basics Review Questions Appendix Answers to Review Questions Chapter 1: Using Digital Resources Responsibly Chapter 2: What are Vulnerabilities and Threats? Chapter 3: Controlling Access to Your Assets Chapter 4: Controlling Network Connections Chapter 5: Encrypting Your Data at Rest Chapter 6: Encrypting Your Moving Data Chapter 7: Risk Assessment Chapter 8: Configuring System Backups and Monitoring Chapter 9: Resource Isolation Design Patterns Index Advert EULA

Includes one year of FREE access after activation to the online test bank and study tools:

• Custom practice exam
• 100 electronic flashcards
• Searchable key term glossary

The Sybex™ method for teaching Linux® security concepts

Understanding Linux Security is essential for administration professionals. Linux Security Fundamentals covers all the IT security basics to help active and aspiring admins respond successfully to the modern threat landscape. You'll improve your ability to combat major security threats against computer systems, networks, and services. You'll discover how to prevent and mitigate attacks against personal devices and how to encrypt secure data transfers through networks, storage devices, or the cloud. Linux Security Fundamentals teaches:

• Using Digital Resources Responsibly
• What Vulnerabilities and Threats Are
• Controlling Access to Your Assets
• Controlling Network Connections
• Encrypting Data, Whether at Rest or Moving
• Risk Assessment
• Configuring System Backups and Monitoring
• Resource Isolation Design Patterns

Interactive learning environment

Take your skills to the next level with Sybex's superior interactive online study tools. To access our learning environment, simply visit www.wiley.com/go/sybextestprep, register your book to receive your unique PIN, and instantly gain one year of FREE access to:

• Interactive test bank with a practice exam to help you identify areas where you need to expand your knowledge
• 100 electronic flashcards to reinforce what you've learned
• Comprehensive glossary in PDF format gives you instant access to key terms you use in your job

Intro -- Linux® Security Fundamentals -- Acknowledgments -- About the Author -- About the Technical Editor -- Contents -- Contents -- Introduction -- What Does This Book Cover? -- Interactive Online Learning Environment and Test Bank -- Chapter 1 Using Digital Resources Responsibly -- Protecting Personal Rights -- Protecting Digital Privacy -- What Is Personal Data? -- Where Might My Personal Data Be Hanging Out? -- What Are My Responsibilities as a Site Administrator? -- Can Escaped Genies Be Forced Back into Their Bottles? -- What Can I Do as a User? -- Establishing Authenticity -- Think About the Source -- Be Aware of Common Threat Categories -- Summary -- Back to the Basics -- Review Questions -- Chapter 2 What Are Vulnerabilities and Threats? -- The Basics: What Are We Trying to Accomplish Here? -- What Are Vulnerabilities and Threats? -- What Can Be Exploited? -- Who's Doing the Exploiting? -- Why Do They Attack? -- Common Vulnerabilities -- Software Vulnerabilities -- Hardware Vulnerabilities -- Bioware Vulnerabilities -- Digital Espionage -- USB Devices -- Backdoors -- Wireless Entry Points -- Stolen Credentials -- Data Breaches -- Identity Theft (Besides Breaches) -- Malware -- Network-Based Attacks -- Man-in-the-Middle Attacks -- Denial-of-Service and Distributed Denial-of-Service Attacks -- Network Routing Attacks -- Summary -- Back to the Basics -- Review Questions -- Chapter 3 Controlling Access to Your Assets -- Controlling Physical Access -- Understanding Your Devices -- Protecting Your Devices -- Managing Authentication Through Effective Password Use -- Managing Authorization Through Permissions -- Controlling Network Access -- Firewalls -- Virus and Malware Protection -- Educating Your Users -- Controlling Software Sources -- PC Software Repositories -- Mobile Package Management -- Summary -- Back to the Basics The SybexTM method for teaching Linux® security concepts Understanding Linux Security is essential for administration professionals. Linux Security Fundamentals covers all the IT security basics to help active and aspiring admins respond successfully to the modern threat landscape. You'll improve your ability to combat major security threats against computer systems, networks, and services. You'll discover how to prevent and mitigate attacks against personal devices and how to encrypt secure data transfers through networks, storage devices, or the cloud. Linux Security Fundamentals teaches: • Using Digital Resources Responsibly • What Vulnerabilities and Threats Are • Controlling Access to Your Assets • Controlling Network Connections • Encrypting Data, Whether at Rest or Moving • Risk Assessment • Configuring System Backups and Monitoring • Resource Isolation Design Patterns About the Author David Clinton is a Linux server admin and Amazon Web Services solutions architect who has worked with IT infrastructure in both academic and enterprise environments. He has created video courses teaching AWS and Linux administration, server virtualization, and IT security for Pluralsight. He has also written or cowritten a dozen technology books, including AWS Certified Solutions Architect Study Guide: Associate (SAA-C01) Exam, Second Edition, and AWS Certified Cloud Practitioner Study Guide: Foundational (CLF-C01) Exam. --This text refers to the paperback edition. Linux Security Fundamentals provides basic foundational concepts of securing a Linux environment. The focus is the digital self-defense of an individual user. This includes a general understanding of major threats against individual computing systems, networks, services and identity as well as approaches to prevent and mitigate them. This book is useful for anyone considering a career as a Linux administrator or for those administrators who need to learn more about Linux security issues. Topics include: Security Concepts Encryption Node, Device and Storage Security Network and Service Security Identity and Privacy Readers will also have access to Sybex's superior online interactive learning environment and test bank, including chapter tests, a practice exam, electronic flashcards, a glossary of key terms. This book guides you through Linux Security Fundamentals covers all the IT security basics to help active and aspiring admins respond successfully to the modern threat landscape. -- Edited summary from book