Our security related services delve deeper into the security features, capabilities, and risks associated with the most commonly deployed services. To be precise, we offer the following:

• Basic Service Security
  • SELinux
  • Host-based access control
  • Firewalls using Netfilter and iptables
  • TCP wrappers
  • xinetd and service limits
• Cryptography
  • TSIG (Transaction Signature)
  • Management of SSL certificates
  • Using GnuPG
• Logging and NTP
  • Time synchronization with NTP
  • Logging: syslog and its weaknesses
  • Protecting log servers
• BIND and DNS Security
  • BIND vulnerabilities
  • DNS Security: attacks on DNS
  • Access control lists
  • Transaction signatures
  • Restricting zone transfers and recursive queries
  • DNS Topologies
  • Bogus servers and blackholes
  • Views
  • Monitoring and logging
  • Dynamic DNS security
• Network Authentication: RPC, NIS, and Kerberos
  • Vulnerabilities
  • Network-managed users and account management
  • RPC and NIS security issues
  • Improving NIS security
  • Using Kerberos authentication
  • Debugging Kerberized Services
  • Kerberos Cross-Realm Trust
  • Kerberos Encryption
• Network File System
  • Taking full advantage of security features in NFS4
  • Securing client-side mount options
• OpenSSH
  • Vulnerabilities
  • Server configuration and the SSH protocols
  • Authentication and access control
  • Client-side security
  • Protecting private keys
  • Port-forwarding and X11-forwarding issues
• Electronic Mail with Sendmail
  • Vulnerabilities
  • Server topologies
  • Email encryption
  • Access control and STARTTLS
  • Anti-spam mechanisms
• Postfix
  • Vulnerabilities
  • Security and Postfix design
  • Configuring SASL/TLS
• FTP (File Transfer Protocol)
  • Vulnerabilities
  • The FTP protocol and FTP servers
  • Logging
  • Anonymous FTP
  • Access control
  • Apache security
  • Vulnerabilities
  • Access control
• Authentication: files, passwords, Kerberos
  • Security implications of common configuration options
  • CGI security
  • Server side includes
  • suEXEC
• Intrusion Detection and Recovery
  • Intrusion risks
  • Security policy
  • Detecting possible intrusions
  • Monitoring network traffic and open ports
  • Working with SNORT
  • Detecting modified files
  • Investigating and verifying detected intrusions
  • Recovering from, reporting, and documenting intrusions