Snort works in three different modes: sniffer mode, packet logging mode, and network intrusion detection system mode. Based on the arguments used when running Snort, the respective mode gets initiated and we can capture and monitor logs accordingly.
- Title Page
- Copyright and Credits
- Contributors
- Packt Upsell
- Preface
- Linux Security Problem
- Security policy
- Configuring server security
- Security policy – server security
- Defining security controls
- Checking the integrity of installation medium by using checksum
- Using LUKS disk encryption
- Make use of sudoers – configuring sudo access
- Scanning hosts with Nmap
- Gaining root on a vulnerable Linux system
- Missing backup plans
- Configuring a Secure and Optimized Kernel
- Local Filesystem Security
- Viewing files and directory details using ls
- Using chmod to set permissions on files and directories
- Using chown to change ownership of files and directories
- Using ACLs to access files
- File handling using the mv command (moving and renaming)
- Implementing Mandatory Access Control with SELinux
- Using extended file attributes to protect sensitive files
- Installing and configuring a basic LDAP server on Ubuntu
- Local Authentication in Linux
- Remote Authentication
- Network Security
- Security Tools
- Linux Security Distros
- Bash Vulnerability Patching
- Security Monitoring and Logging
- Viewing and managing log files using Logcheck
- Monitoring the network using Nmap
- Using Glances for system monitoring
- Monitoring logs using MultiTail
- Using system tools – whowatch
- Using system tools – stat
- Using System tools – lsof
- Using System tools – strace
- Real time IP LAN monitoring using IPTraf
- Network security monitoring using Suricata
- Network monitoring using OpenNMS
- Understanding Linux Service Security
- Scanning and Auditing Linux
- Vulnerability Scanning and Intrusion Detection
- Other Books You May Enjoy
How it works...
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.