Security Flashcards
Disk Encryption
data security
partition encryption
data security
update software apps regulary
app > system
APIS
app > cloud
Disable root login
authentication and authorization
implement intrusion detection
file > system
setup dedicated users for services
app > system
remove unnecessary packages
app > system
implement ssh key pairs
authentication and authroization
reduce number of servcies provided by a single host
network
data at rest
data > cloud
virtual switches
network> cloud
compute resources
compute > cloud
serverless
app > cloud
inventory managmeent
compute >cloud
implement a local firewall
network
implement an intrusion prevention system
network
standard apps, microservices and containers
app > cloud
network perimeter
network > cloud
apply kernely security patches
kernel > system
set a grub bootloader password
kernel > system
file encryption
data
offsite backups
data
disable booting from external drives
kernel > system
implement a VPN
network
interact with services
systemct network
view sockets processes and open files
ss, ps, lsof
data in transit/motion
data > cloud
cryotography and key management
data > cloud
virtual firewalls
network > cloud
hypervisors
compute > cloud
middleware and runtime
compute > cloud
disable unecessary services
app > system
setup dedicated users for services
app > security
implement security best practices for common system services
app > system
use separate partitions for suers files and system files
file > system
implement selinux for apparmor
file > system
manage bash history
file > system
update /etc/syscrl.conf with secure configurations
kernel > system
enforce strong passwords and password expiration
authorization and authentication
operating systems and virtual machines
compute >cloud
involves the protection of hypervisors vms and os
compute based security
concerned with protections around storing and transferring data whcih generally includes cryptography
data > cloud
network security groups
netowrk > cloud
remote backups
data>cloud
Interact with firewall
firewall-cmd red hat and ufw debian
transport layer seucirty TLS when possible or secure socket layer
network
implement a centralized authentications ervice kerberos
network
use encryption for data transfer
network
open only necessary ports in the firewall
network
utilize relevant mount options for security file
system
userspace program that provides disk encrpytion
cryptsetup
used for encrypting partitions and files
dm crypt
tools for data transfer and communication
scp, ssh, rsync sftp network
investigate and analysis tools
wireshark, nmap, traceroute network
