Security Strategies in Linux Platforms and Applications

Chapter 14. Detecting and Responding to Security Breaches

SO FAR, THIS BOOK HAS COVERED myriad security issues. You've looked at a variety of access controls, from standard read, write, and execute permissions through detailed options associated with Security Enhanced Linux (SELinux). Previous chapters have described how to keep services to a minimum, along with the dangers associated with a variety of services.

With that information in mind, you should know how to audit a system to identify baseline performance parameters; deviations may be causes for concern. You'll be able to identify user access through commands and log files. In addition, sensible policies can keep users within secure limits. But not all users are highly knowledgeable about ...