
Explore linux security techniques to harden production servers, with practical guidance on auditing, encryption, securing services, containers, network defenses, and security testing for verification.
Learn to configure rsyslog for local and remote logging, implement log rotation, and ship logs to a centralized server over tcp connections for secure, tamper-resistant log management.
Learn how to manage Linux logs with journald, compare it to syslog, use journalctl for filtering and monitoring, enable persistent on-disk storage, and integrate with rsyslog for reliable remote logging.
Audit and enforce Linux user passwords by configuring password age with chage, including min and max days, expiration, and warnings, plus enforcing complexity via the pwquality configuration and login.defs.
Audit Linux user passwords using John the Ripper to test dictionary and brute force attacks, combine /etc/passwd and /etc/shadow with unshadow, and enforce strong passphrases.
Audit filesystem with the audit daemon to record who accessed what files and when. Use auditctl to set watches on files or folders, and ausearch or aureport to analyze logs.
Audit the suid and sgid bits in Linux, understand how set user id and set group id work, how passwd uses them, and how to locate such binaries with find.
Auditing logins with fail2ban teaches you to monitor linux system logs, ban offending IPs via firewall rules, and configure jail.local to protect ssh and other services.
Learn LUKS disk encryption for Linux, using 512-bit AES and cryptsetup to encrypt whole disks with multiple keys. Understand how to unlock, mount, and manage up to eight keys.
Explore how the GNU Privacy Guard enables end-to-end encryption using public and private keys. Encrypt data at rest and in motion across platforms with GPG, including backups and file transfers.
Explore md5 and sha checksums to verify file integrity, compare hashes with official signatures, and safeguard downloads via sha256, sha512, and gpg-signed files.
Encrypt data in transit with SSH, configure sshd for protocol 2, generate and manage host keys, and create secure tunnels to protect other protocols.
Learn how SELinux secures Linux services by enforcing access controls, using contexts to isolate processes, and tuning modes and contexts with setenforce, sestatus, chcon, and restorecon.
Learn how to secure Linux services with SELinux by persisting context changes, using semanage and audit2allow to build custom policies, and safely handling custom services and ports without disabling SELinux.
Learn how chroot jails isolate services by changing the root filesystem, compare them to virtualization and containers, and manage dependencies for secure SSH/SFTP deployments.
Explore Linux containers with LXC, harnessing a shared kernel to deliver isolation and near bare-metal performance, while comparing to chroot and covering practical setup on CentOS and Ubuntu.
Learn how TCP wrappers use libwrap to filter service access via hosts.allow and host.deny, including sshd and vsftpd, with advanced twist and spawn capabilities for logging.
Learn how to install, configure, and manage iptables, the Linux software firewall, including default policies, chains, and rules. Explore switching to firewalld and persisting rules for production deployments.
Learn to use firewall-cmd and FirewallD to manage Linux firewalls with zones, assign interfaces to public or internal, and apply permanent per-zone rules including http and https.
Verify firewall configurations by auditing open ports with netstat and ss, then validate with Nmap scans to ensure only intended ports are accessible.
Learn to verify that network data is encrypted using protocol analyzers like Wireshark, capture packets, follow TCP streams, and distinguish encrypted payload from unencrypted traffic.
Learn to verify network data encryption on Linux servers by using tcpdump to capture traffic, dump to a file, and analyze with Wireshark, comparing SSH and Telnet encryption.
The Linux Security Techniques series introduces the viewers to the various security features found in modern Linux distributions. Topics covered include data encryption, auditing access, SELinux and firewall configuration among others. The series also lightly covers penetration testing to ensure that each security technique is implemented properly.
Linux Security Techniques is an advanced-level course designed to equip students with the knowledge and skills necessary to secure Linux-based systems effectively. In today's digital landscape, securing Linux servers and workstations is of utmost importance, as these systems power a wide range of critical infrastructure and applications. This course delves deep into various security aspects of Linux, providing students with practical insights and hands-on experience in safeguarding their systems against a wide range of threats.
This Linux Security Techniques course will empower students with the knowledge and skills needed to mitigate security risks, protect critical assets, and maintain the integrity of Linux-based systems in a constantly evolving cybersecurity landscape.
· Identify security incidents, track system activities, and ensure compliance with security policies
· Maintain the integrity and confidentiality of your Linux systems and ensures compliance with security policies and regulations.
· Develop and enforce data security policies tailored to your organization's specific needs and regulatory requirements.
· Learn to configuring SELinux, verify status of SELinux, modify status temporarily, view SELinux
· Learn all about TCP Wrappers, enable TCP Wrappers for a service, allowing access to more than one service at a time, option fields, generating log messages, SPAWN, EXPANSIONS, TWIST, configuring rules, and restricting access to SSH.
· Get the skills and knowledge to effectively assess and improve the security of computer systems, networks, and applications