Duration
5 days
Prerequisites
Linux System Administration or equivalents or sound knowledge of server administration
MySQL knowledge
Course Outline
Base Operating System
- OS hardened for maximum security
Firewall Configurations and tweaking
- Firewalls are tweaked for increased security, resilience, and efficacy.
Anti-Malware Configuration
- Malware Scanner, effective for the detection of php backdoors, dark mailers and other malicious files.
Kernel parameters
- Optimize kernel parameters to enhance server security.
Brute Force Detection
- Detects unauthorized access to the server, and blocks attackers using sophisticated counter tools.
Secure Shell SSH
- Tweak SSH settings to secure SSH access.
Shell Fork Bomb
- Protect your server from users with terminal access who may inadvertently or intentionally cause a fork bomb.
Configure system logging
- Configure remote logging to use transport layer encryption and manage additional logs generated by remote systems.
Configure system auditing
- Enable and configure system auditing.
Control access to network services
- Manage firewall rules to limit connectivity to network services.
Manage special permissions
- Work with set user ID (SUID), set group ID (SGID), and sticky (SVTX) permissions and locate files with these permissions enabled.
Manage user accounts
- Set password-aging properties for users; audit user accounts.
MySQL
- Better security by hardening MySQL server.
- Filesystem access restrictions and ACLs
- Storage data
- Access control lists
- Designing a chroot-jail
- Manually designing a sandbox
- MySQL's built-in chroot mechanism
- Modern virtualization approaches
- Encrypting network traffic
- OpenSSL
- OpenSSH
- OpenVPN
- MySQL Memory problem
- Security related configuration attributes
- Connectivity
- Logging
- Transactions and ACIDness
- Others
- Access management via SQL
- root password
- Tables and security functions
- Check table consistencies and repair databases
- Setting up connection limits
Apache
- Harden it to max security
Programme scope, delivery arrangements and suitability are confirmed during enquiry.