Unix Security Testing

Unix Security is an ongoing process. However, once the software is installed and initial checks completed, it can be a simple maintenance task of installing latest patches, verifying user accounts, running security software (and their extensions) and monitoring logs.

Subscribe to security mailing lists. Read security newsgroups. Keep up to date on the latest security procedures.

If you do NOT use NIS or NIS+, make your system a HP-UX trusted system for easier system security

Test w/ SATAN (network security), COPS (Various system checks), TIGER (ways for root to be compromised), and CRACK (password checker). Install Tripwire to detects changes to files).

Check btmp, wtmp, syslog, sulog etc. regularly. Set up automatic email or paging to warn system administrators of any suspicious behavior. Also check your snort logs.