Hardening Flashcards
Hardening
Act of configuring an operating system securely by updating it, creating rules and policies to govern it, and removing unnecessary applications and services
TOS
Trusted Operating System:
An operating system that meets the requirements set forth by government and has multilevel security
Windows 7 (and newer)
Mac OS X 10.6 (and newer)
FreeBSD (TrustedBSD)
Red Hat Enterprise Server
Patch/Hotfix
A single problem-fixing piece of software for an operating system or application
Security Update
Software code that is issued for a product-specific security-related vulnerability
Critical Update
Software code for a specific problem addressing a critical, non-security bug in the software
Service Pack
A tested, cumulative grouping of patches, hotfixes, security updates, critical updates, and possibly some feature or design changes
Patch Management:
Process of planning, testing, implementing, and auditing of software patches
Large organizations centrally manage updates through an update server
Disable the wuauserv service to prevent Windows Update from running automatically
It is important to audit the client’s status after patch deployment
Group Policy
A set of rules or policies that can be applied to a set of users or computer accounts within the operating system
Access the Group Policy Editor by opening the Run prompt and enter gpedit
Baselining
Process of measuring changes in the network, hardware, and software environment
A baseline establishes what is normal so you can find deviations
File Systems
Windows: NTFS, FAT32
Apple: HFS+, APFS
Linux: ext3, ext4