Linux Security

Question 1

What are the main security requirements, describe them

Answer 1

Authorisation - Only allow those that need access to the data
Authenticity - Verifying they are who they say they are
Privacy/Confidentiality - Ensure personal information is not being compromised
Integrity - Ensuring that the data has not been tampered with
Non-repudiation - Confirmation that data is received. Ability to prove it in court
Availabilty - Ensure that the system can perform it’s required function

Question 2

What are the types of attacks that can be made against systems?

Answer 2

Reading data
Changing data
Denial of service attack
Access to a computer - Aquiring access trough user accounts

Question 3

What are some methods of attacking a system?

Answer 3

Password guessing
Social engineering
Trojan horses
Virus
Software bugs
Address spoofing

Question 4

How do you create, set password and remove a user?

Answer 4

useradd (username)
passwd (username)
userdel (userdel)