136 reputation
3
bio website
location
age
visits member for 2 years, 4 months
seen May 18 at 11:18

Aug
9
comment Detect changes in /boot when using full disk encryption
The risk is minimal. This is a practical thought experiment. Currently I'm after a statically compiled kernel without modules that I can checksum. That together with a checksummed initrd where I copy my checksum program too would be a system/method I'd be fairly confident in trusting.
Aug
8
comment Detect changes in /boot when using full disk encryption
tyler, can you elaborate on that? I guess a first step in your direction would be building a kernel without modules and checksumming that. In addition checking which software is running in the initrd. If you have a helpful link for your suggestion, don't hold back. Currently I'm solving this problem by copying over a checksum software to initrd and checksumming away with checksums saved to remote pc.
Aug
6
comment Detect changes in /boot when using full disk encryption
Thats what I'm trying, getting the most out of what I can do. Secure Boot is not a present practical solution, AFAIK. Currently I think of two solution: Checksum from encrypted root OR copy checksum program to initrd on every boot and store checksums off-site. That way I can at least detect tampering, as long as the kernel doesn't lie which is even harder than getting a keylogger in there.
Aug
5
asked Detect changes in /boot when using full disk encryption
Mar
21
comment Home “datacenter” security, where and what to look for?
I'll first try to get ahold of military it security standard 54/100 and then try to work my way down the list. Without external auditors besides my itsec friend from the "navy". Thank you, all :)
Mar
21
comment Home “datacenter” security, where and what to look for?
I'm from Germany, Northrine-Westfalia to be precise. This is more about playing around, so I guess two to three hours of worktime would be something I could spare for the fun of it.
Mar
20
awarded  Supporter
Mar
20
comment Home “datacenter” security, where and what to look for?
I already have the spreadsheet in the form of a document outlining the mechanism, its benefit and its current status. A friend from military informaton technology will come over and have a look at my physical security setup so maybe I can add something there too. I guess I will just ask him for their requirements. Also ISO27001 looks interesting. Are there lowcost Auditors?
Mar
19
comment Home “datacenter” security, where and what to look for?
Im asking for Standards on how to document what I did. Possibly wide known standards for which certification via external auditors is possible. Im a novice in this regard, so I want to learn them by doing it. Didnt you understand that or was I asking a question with a too broad answer set?
Mar
19
awarded  Editor
Mar
19
revised Home “datacenter” security, where and what to look for?
added 280 characters in body
Mar
19
comment Home “datacenter” security, where and what to look for?
No, this is not a duplicate, as I'm more interested in the Certification and Documentation aspect and not the What-to-Buy aspect.
Mar
19
awarded  Student
Mar
19
asked Home “datacenter” security, where and what to look for?