network profile
| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 1 year, 2 months |
| seen | May 5 at 13:16 | |
| stats | profile views | 3 |
|
Aug 9 |
comment |
Detect changes in /boot when using full disk encryption The risk is minimal. This is a practical thought experiment. Currently I'm after a statically compiled kernel without modules that I can checksum. That together with a checksummed initrd where I copy my checksum program too would be a system/method I'd be fairly confident in trusting. |
|
Aug 8 |
comment |
Detect changes in /boot when using full disk encryption tyler, can you elaborate on that? I guess a first step in your direction would be building a kernel without modules and checksumming that. In addition checking which software is running in the initrd. If you have a helpful link for your suggestion, don't hold back. Currently I'm solving this problem by copying over a checksum software to initrd and checksumming away with checksums saved to remote pc. |
|
Aug 6 |
comment |
Detect changes in /boot when using full disk encryption Thats what I'm trying, getting the most out of what I can do. Secure Boot is not a present practical solution, AFAIK. Currently I think of two solution: Checksum from encrypted root OR copy checksum program to initrd on every boot and store checksums off-site. That way I can at least detect tampering, as long as the kernel doesn't lie which is even harder than getting a keylogger in there. |
|
Aug 5 |
asked | Detect changes in /boot when using full disk encryption |
|
Mar 21 |
comment |
Home “datacenter” security, where and what to look for? I'll first try to get ahold of military it security standard 54/100 and then try to work my way down the list. Without external auditors besides my itsec friend from the "navy". Thank you, all :) |
|
Mar 21 |
comment |
Home “datacenter” security, where and what to look for? I'm from Germany, Northrine-Westfalia to be precise. This is more about playing around, so I guess two to three hours of worktime would be something I could spare for the fun of it. |
|
Mar 20 |
awarded | Supporter |
|
Mar 20 |
comment |
Home “datacenter” security, where and what to look for? I already have the spreadsheet in the form of a document outlining the mechanism, its benefit and its current status. A friend from military informaton technology will come over and have a look at my physical security setup so maybe I can add something there too. I guess I will just ask him for their requirements. Also ISO27001 looks interesting. Are there lowcost Auditors? |
|
Mar 19 |
comment |
Home “datacenter” security, where and what to look for? Im asking for Standards on how to document what I did. Possibly wide known standards for which certification via external auditors is possible. Im a novice in this regard, so I want to learn them by doing it. Didnt you understand that or was I asking a question with a too broad answer set? |
|
Mar 19 |
awarded | Editor |
|
Mar 19 |
revised |
Home “datacenter” security, where and what to look for? added 280 characters in body |
|
Mar 19 |
comment |
Home “datacenter” security, where and what to look for? No, this is not a duplicate, as I'm more interested in the Certification and Documentation aspect and not the What-to-Buy aspect. |
|
Mar 19 |
awarded | Student |
|
Mar 19 |
asked | Home “datacenter” security, where and what to look for? |
