Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am new to mainframe security testing practice. So far I have read a few articles on that even security of mainframe can be compromised.

I would like to know if there are any such checklists that the security tester follow while testing a mainframe application.

share|improve this question

closed as too broad by Eric G, Adi, TildalWave, Xander, Gilles Mar 20 '14 at 12:49

There are either too many possible answers, or good answers would be too long for this format. Please add details to narrow the answer set or to isolate an issue that can be answered in a few paragraphs.If this question can be reworded to fit the rules in the help center, please edit the question.

I have fixed your tags, as they are entirely off topic for this question. – Rory Alsop Mar 19 '14 at 10:27

Anything can be compromised, however traditional mainframe configurations are very well structured so generally it is considered much harder than, for example, an average server running PHP:-)

Start with one of the security hardening guides for your mainframe. If you are running IBM, the manuals on IBM mainframe security will give you 95% of what you need.Start with the redbooks. The one I have linked to is over 500 pages and it is just one of many!

That said - if you are new to mainframe security, you really shouldn't be going anywhere near a mainframe. Generally they run high value data and tools...

share|improve this answer

I think you'll have fun getting to grips with Mainframe security, it's quite a different world.

As @roryalsop says be very careful before you test a live mainframe, they tend to run very high value apps and can be fragile (i.e. if you break it, the test will likely end pretty quickly)

Some resources I would recommend

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.