Keeping Your Linux System Secure In An Insecure World

Rob

Administrator
Staff member
Joined
Oct 27, 2011
Messages
1,207
Reaction score
2,239
Credits
3,467
Nobody would argue with the fact that we live in an insecure world. Though security is talked about in the computer industry almost more than in any other field, some kind of job related security is necessary in any endeavor. A landscape gardener, for example, has to be conscious about security with regards to his/her tools. Improper use of these tools could cost someone a finger or maybe even a limb. Landscapers have even been attacked and killed by alligators in Southern Florida, but this would be considered an unlikely occurrence. IT professionals don't have to worry about losing limbs or getting eaten by alligators but they do have to worry about losing data or having their machines attacked by crackers. Just as a landscaper would never do his job without putting on gloves, a helmet, goggles and other types of protection, and real IT professional would never think of running a machine, especially in a network, without it being secure against attacks from the outside and with a backup system in case there's a hardware failure on the inside.

That said, when we talk about making a machine secure, we mean as secure as possible. 100 percent security, is, at this stage of the game, not a real goal. Most software contains some sort of flaw that can be exploited. In fact, the networking protocols that run the internet were not designed with security in mind. Back then, the internet was a relatively small and happy family of computers run by several universities and the US. Department of Defense. Security only became a major concern after the World Wide Web became a factor in our daily lives. Due to massive growth, instead of that small, happy family, the internet has become a huge, extended at at times dysfunctional family. Attempts at increasing security consist largely of patches applied to the software that provides internet services. Though there are periodic major incidents like CodeRed in July of 2001 or Slammer in January of 2003, luckily, we haven't suffered through more frequent outages. The patches seem to be holding up. We can also consider ourselves fortunate to have Unix and Unix-like systems such as Linux forming the backbone of the Internet. Most experts agree that they are more secure by design than present Microsoft Windows systems.

60 percent of servers on the WWW are running Apache on some version of Unix or on a Linux distribution

Linux, which took its core design from Unix systems, separates user accounts and sets strict limits on what users can do on the system. This makes it very difficult for viruses to invade the whole system. This shouldn't give us a false sense of security, however. Programs have to be installed by the root user and if proper precautions aren't taken, he or she could download a malicious program and install it, thus compromising the system. And this is only one way to compromise a system. Flaws in programs can be exploited, so the administrator needs to keep the system up to date and install newer versions of major programs when these flaws are found and fixed. Unpatched programs could make the system vulnerable to denial of service attacks or even might become potential routes of entry. Even when you're careful about the source of your programs and you religiously update a machine, there is still the need to keep your system locked up by using an effective firewall.
 


Nobody would argue with the fact that we live in an insecure world. Though security is talked about in the computer industry almost more than in any other field, some kind of job related security is necessary in any endeavor. A landscape gardener, for example, has to be conscious about security with regards to his/her tools. Improper use of these tools could cost someone a finger or maybe even a limb. Landscapers have even been attacked and killed by alligators in Southern Florida, but this would be considered an unlikely occurrence. IT professionals don't have to worry about losing limbs or getting eaten by alligators but they do have to worry about losing data or having their machines attacked by crackers. Just as a landscaper would never do his job without putting on gloves, a helmet, goggles and other types of protection, and real IT professional would never think of running a machine, especially in a network, without it being secure against attacks from the outside and with a backup system in case there's a hardware failure on the inside.

That said, when we talk about making a machine secure, we mean as secure as possible. 100 percent security, is, at this stage of the game, not a real goal. Most software contains some sort of flaw that can be exploited. In fact, the networking protocols that run the internet were not designed with security in mind. Back then, the internet was a relatively small and happy family of computers run by several universities and the US. Department of Defense. Security only became a major concern after the World Wide Web became a factor in our daily lives. Due to massive growth, instead of that small, happy family, the internet has become a huge, extended at at times dysfunctional family. Attempts at increasing security consist largely of patches applied to the software that provides internet services. Though there are periodic major incidents like CodeRed in July of 2001 or Slammer in January of 2003, luckily, we haven't suffered through more frequent outages. The patches seem to be holding up. We can also consider ourselves fortunate to have Unix and Unix-like systems such as Linux forming the backbone of the Internet. Most experts agree that they are more secure by design than present Microsoft Windows systems.

60 percent of servers on the WWW are running Apache on some version of Unix or on a Linux distribution

Linux, which took its core design from Unix systems, separates user accounts and sets strict limits on what users can do on the system. This makes it very difficult for viruses to invade the whole system. This shouldn't give us a false sense of security, however. Programs have to be installed by the root user and if proper precautions aren't taken, he or she could download a malicious program and install it, thus compromising the system. And this is only one way to compromise a system. Flaws in programs can be exploited, so the administrator needs to keep the system up to date and install newer versions of major programs when these flaws are found and fixed. Unpatched programs could make the system vulnerable to denial of service attacks or even might become potential routes of entry. Even when you're careful about the source of your programs and you religiously update a machine, there is still the need to keep your system locked up by using an effective firewall.
For me, You are a genius !!!
 
But android is also from UNIX systems.
So why they hacked ?
I know this is simple question, but I am curious.
 
But android is also from UNIX systems.
So why they hacked ?
I know this is simple question, but I am curious.

Android is based on a stripped down Linux kernel, not Unix. Everything can be hacked... the U.S. government has been hacked many times, JP Chase Bank, Equifax.... nothing is immune.
 
Shouldn't the title be "Keeping Your Linux System Secure in An Insecure World" instead of "Keeping Your Linux System Secure An Insecure World"
 
Fixed, thanks for the tip :)

Wizard
 
There's only one thing that makes your Linux system insecure - an old exploit used by hackers which is when your distro has only one user. I read about that exploit last year and it's known since 2011. One user means one sudo user, one sudo user means just one password which makes it a lot easier for hackers to exploit your system and gain access to it. Two or more users and the attackers will have a bad day at the office. :D
 
The only way the keep your system 100% secure is to either unplug or disconnect it from the internet.
 
And bury it encased in 20 meters of concrete!

After all, we can't forget about the 'evil maid' attack vector.
 
Shouldn't the title be "Keeping Your Linux System Secure in An Insecure World" instead of "Keeping Your Linux System Secure An Insecure World"
I see the former on my screen. That may be a glitch on your end, or maybe it was fixed before I came here.
 

Members online


Top