Linux Hardening in Hostile Networks: Server Security from TLS to Tor

2. Workstation Security

A sysadmin workstation is a high-value target for an attacker or thief because administrators typically have privileged access to all servers in their environment. This chapter covers a series of admin-focused workstation-hardening steps. “Section 1: Security Fundamentals” covers basic workstation-hardening techniques including the proper use of lock screens, suspend, and hibernation, and introduces Tails as a quick path to a hardened workstation and an example of some other techniques you can put into practice. Since a major attack vector for most workstations is through the browser, the section finishes up by covering a few fundamental principles of how to browse the web securely, including an introduction to HTTPS, ...