Questions tagged [hardening]

the process of tightening security on a system.

Filter by
Sorted by
Tagged with
-1 votes
2 answers
116 views

How to learn to secure Web Applications? [closed]

The server is based on Linux and applications are based on Android and iOS. I was looking through "Linux Hardening Guide" as someone recommended it to me in order to harden Linux servers. I ...
Team B.I's user avatar
  • 101
0 votes
1 answer
127 views

Do I need to study how to find security flaws in order to harden my Linux server?

I'm wondering this. I am planning to resolve Vulnerability Assessment and Penetration Testing reports. Do I need to learn how to do such attacks in order to harden the server? Or don't I?
Team B.I's user avatar
  • 101
0 votes
1 answer
58 views

OS/DB Hardening Checklist Drafting Process

We are looking into reviewing our organization OS/DB hardening checklist (done by predecessor). We're aware that there are various benchmarks out there like CIS & STIG to guide on that, and the ...
nlks's user avatar
  • 3
0 votes
0 answers
121 views

What information does the Microsoft Intelligent Security Graph use for querying files?

I'm looking into WDAC and the option to use Microsoft's ISG for files that are not explicitly allowed or denied caught my interest. Unfortunately I haven't been able to find any information on what is ...
LanMan2-4601's user avatar
1 vote
1 answer
66 views

Theoretical unbreakable security for a single compute instance/machine [closed]

UPDATE : i know i modify the post significantly, will try to not do that anymore. Please read from scratch Let's imagine we have a machine that holds customer private keys to various crypto assets, ...
vach's user avatar
  • 111
1 vote
1 answer
138 views

Rowhammer mitigations in current hardware and software

I've been looking into rowhammer attacks and mitigations and there are two (what seem to be) mitigations that I've seen that are actually implemented in currently available hardware and software, but ...
LanMan2-4601's user avatar
1 vote
3 answers
284 views

Understanding FDE: Is the encrypted Linux protected against a compromised boot volume?

I use this initramfs-based FDE on my headless server. My motivation is to secure my system against physical tampering. I am aware that securing an untrusted hardware is not possible. This question is ...
pico_prob's user avatar
  • 113
4 votes
1 answer
293 views

Why should I re-generate a server's SSH host keys?

This server hardening guide suggests re-generating the RSA and ED25519 host keys. What is the advantage of re-generating the default key?
angryserver's user avatar
2 votes
1 answer
136 views

Why should I disable insecure SSH hostkeys if I never plan on using them?

A number of articles suggest removing insecure (broken) SSH key types in order to have a more secure server. In practice, if I only connect to the server with secure key types, why should I bother ...
angryserver's user avatar
1 vote
0 answers
59 views

Is there any guideline or procedure for 4G hardware equipement (4G landline phone and home Wifi router) security audit/assessment?

I need to perform a security audit/assessment on 4G LTE hardware equimements : 4G landline wireless phone (not android OS but with many features such as WiFi hotspot) 4G Wifi home router Is there ...
Jason Krs's user avatar
  • 369
0 votes
1 answer
116 views

How to harden a FOSS and gratis operating system?

I want to migrate from Windows to Ubuntu. I understand that Ubuntu's1 security model is a bit different than that of Windows but I don't aim to ask about this particular OS, rather, in general, what ...
Arcticooling's user avatar
0 votes
0 answers
487 views

Remotely disable a laptop's ability to power on or charge?

If I loan out laptops to my employees to work remotely, such as Dr's, Nurses and other healthcare workers that generate sensitive information on patients, how can I remotely disable the laptop's ...
Definity's user avatar
  • 109
1 vote
1 answer
939 views

Where could we get CIS Hardening Scripts for AWS EC2?

CIS has published hardening standards for all operating systems of EC2 in AWS. CIS also provides hardened images as well but they're quite expensive at $130/year/instance. Is there a place where we ...
Biju's user avatar
  • 113
0 votes
1 answer
132 views

Would it be useful from a security perspective to harden an interpreter like Python or NodeJS by removing support for unused features?

When hardening a system you want to remove any features that you do not need. I have been thinking about this concept from the perspective of interpreters like Python, NodeJS, PHP etc. and am ...
Blink's user avatar
  • 3
0 votes
2 answers
178 views

Disable everything but a hidden command for root access

linux security and root access question.... I'm setting up a server that has a validator node running on it for a blockchain. I was trying to harden the security of my server. I set up ufw for all ...
user267912's user avatar
0 votes
1 answer
307 views

Is it possible to protect browser credentials from malicious processes?

What items should be considered to create a browser that prevents all access to stored credentials by a malicious process? Hardware attacks being out of scope. Are there public projects addressing ...
gxtaillon's user avatar
  • 183
1 vote
1 answer
463 views

How should GNU/Linux noobs harden their dekstop OS?

I'm interested in using GNU/Linux for different reasons. Partly for freedom, privacy, and security. But also to force myself to learn Linux. One issue I’ve found is that desktop Linux seems to have ...
arrakies's user avatar
2 votes
0 answers
511 views

How to harden portable Tor Browser installation (SELinux, sandbox)?

tldr How can I define a SELinux policy, that limits filesystem access of portable Tor Browser to its installation directory, say /home/user/.local/opt/tor-browser_en-US? How might Tor Browser be ...
reynor's user avatar
  • 21
0 votes
0 answers
33 views

How to recover a hacked site with WSO Shell [duplicate]

Recently wordpress site on centos 7 server is hacked and WSO shell was uploaded. Ive checked other sites and nothing was changed, Im using centos web panel and the root password also was not changed. ...
Pc Monk's user avatar
2 votes
1 answer
253 views

How do I compare the safety of a compiled program with optimization flag?

I would like to know how I can know which is the safest compilation line, that is: Having several compilation lines in, for example, GCC, how do I know which one is more secure? Hardening would be a ...
sgio's user avatar
  • 21
3 votes
1 answer
338 views

How can I improve my sheep dipping process?

Problem: The hiring department occasionally sends me Word documents asking to clear the file as "safe" to open and review for purposes like resumes etc.; they can come from anywhere and are ...
PlasticCasio's user avatar
1 vote
2 answers
1k views

Does VNC need hardening when inside LAN (home network)?

This is a very newbie question, but I would just like to make sure that I'm not missing anything: If I connect via VNC protocol to my various servers etc. inside my own LAN (home network), then should ...
Richie79's user avatar
0 votes
1 answer
412 views

what are the best counter measures against reverse engineering of firmware? [closed]

How can I best prevent, that critical commandos (e.g. open garage door) from an IoT device are being reverse engineered from the firmware? Is the following list complete / do you spot any errors? Any ...
onGESOnEGa's user avatar
0 votes
1 answer
307 views

The level of security regarding a TeamViewer host deployment

I'm a systems specialist in our organization and I've read a lot about TeamViewer security concerns over the last few years. Now I decided to come seek professional and objective opinions about the ...
Tenttu's user avatar
  • 51
1 vote
1 answer
3k views

Way to remove rc4 from Linux Cipher Suites

Running this command resulted with the list of ciphers which supports rc4: /usr/bin/openssl ciphers -v | grep -i "rc4" What's the easiest way and how to remove specifically ciphers that ...
Infidel's user avatar
  • 91
1 vote
1 answer
163 views

How to implement zero trust concept on a pod running in Kubernetes?

Was thinking to use Ambassador design pattern and filter each request through Nginx with Waf (mod_security or Naxsi) in reverse proxy and ACL, authentication and authorization to pod. What are the ...
dev's user avatar
  • 977
3 votes
1 answer
2k views

Is it possible to run commands that exist only on the host on a docker container?

We would like to harden our Docker Image and remove redundant software from it. Our Devs and Ops asked to keep some Linux tools used for debugging on the containers running on our Kubernetes Prod ...
whiteberryapps's user avatar
1 vote
2 answers
320 views

Secure a virtual machine during a lab exercise

I recently started the Offensive Security AWAE course. On their connectivity guide page, they warn about the hazards of connecting to their labs: you will be exposing your computers' VPN IP to other ...
Martin Fürholz's user avatar
0 votes
0 answers
102 views

Hardening WMI: Any security beneifit to "winmgmt /standalonehost"? [duplicate]

Any security benefit to winmgmt operating outside of shared svchost processes via the command winmgmt /standalonehost ? As for security, yes, it is useful for changing wbem Authentication levels, ...
Tyler's user avatar
  • 435
1 vote
0 answers
709 views

Hardening WMI: Any security benefit to changing Impersonation level & separately, setting 'Winmgmt Standalonehost?'

Question #1 Does changing the Default Impersonation Level in WMI to "anonymous" or "identify" help mitigate against WMI exploitation, implants, and persistent threats on a local ...
Tyler's user avatar
  • 435
6 votes
1 answer
2k views

Hardening NFC tags for authentication

So I have a small electronics project where I am using common Mifare Classic 1K NFC tags as a means of authentication. (Mifare DesiFire is just too expensive) I know these aren't very secure so here ...
Inhinias's user avatar
1 vote
2 answers
624 views

Setup guide for Privileged Access Workstation on Windows 10

I am setting up a Privileged Access Workstation (PAW) to access a whitelist of websites. Currently I have been following this guide on Github by unassassinable and applying the latest Windows 10 ...
PMC's user avatar
  • 111
1 vote
1 answer
398 views

My WP site just got hacked for the third time even after following WP hardening guidelines

After the second hack, we did all the necessary things written here - https://wordpress.org/support/article/hardening-wordpress/ , https://security.stackexchange.com/a/180925 and we also changed the ...
cilapo1541's user avatar
0 votes
1 answer
111 views

How can Linux service installation page create an attack surface?

Based on one of the lectures of Planning, Auditing and Maintaining Enterprise system course by Greg Williams (Department of computer science university of Colorado): Let's say they were installing ...
R1W's user avatar
  • 1,627
2 votes
2 answers
154 views

Does removing features from a library increase or reduce security risks?

Software libraries targetting resource constrained environments like embedded systems use conditional compilation to allow consumers to shave space and thus increase performance by removing unused ...
TZubiri's user avatar
  • 113
0 votes
0 answers
972 views

Secure mount options in Ubuntu CIS benchmarks too narrow?

this is the first of a series of questions on hardening Linux servers at the filesystem level. At work I'm hardening an Ubuntu 18.04 Server following the CIS benchmark 2.0.1. Instead of just running ...
Nostromo's user avatar
0 votes
1 answer
346 views

How to safely reinstall Windows in Thailand - avoiding BadUSB/SSD

I have newly bought HP Pavilion laptop, which i am planning to nuke and reinstall. I really do not like the bloatware as it might posses a security risk. However, in Thailand, i do not trust the ...
Thailife17's user avatar
0 votes
0 answers
25 views

Newly bought HP Pavilion laptop - bloatware - security risks [duplicate]

I’ve recently bought a new HP Pavilion laptop, it came with pre-installed software (bloatware) such as various games and other useless stuff. When setting up the laptop, i was connected to AIS, which ...
Thailife17's user avatar
1 vote
1 answer
419 views

IIS FTPS Best Practise

I have the task to place an FTP server in the company DMZ for our partners to store sensitive data that can not be sent by mail. I have chosen the IIS FTPS. I will generate a self-signed certificate ...
John's user avatar
  • 167
0 votes
1 answer
226 views

Restrict privileged users from accessing certain directories on Linux servers with Grsecurity?

My question is similar to these: Protect sensitive data from sysadmin prying eyes Restrict access to a specific directory on Linux From those, I understand that SELinux could accomplish my goal. ...
MountainX's user avatar
  • 340
2 votes
1 answer
3k views

How to make it harder for a VPS provider to access my data?

I know it is impossible to completely prevent a host from accessing the data of a virtual machine (as noted here, here and here), but I think there is value in making it harder to do so. Bare metal ...
Michael Baker's user avatar
2 votes
1 answer
171 views

Can a VPN provider or actors within its infrastructure access open ports on the client machine?

From my understanding of a VPN, it essentially creates a network between the two 'machines'. So if I have open ports (e.g. HTTP, SSH) on my client machine, those can be accessed by the VPN provider or ...
Wayne Shelley's user avatar
1 vote
0 answers
373 views

Tightly locking down a FreeBSD jail

Suppose one is running a single internet-facing daemon, as a service in a FreeBSD jail, and expects targeted hostile attacks targeting open WAN ports and services. Like many services, the service and ...
Stilez's user avatar
  • 1,684
2 votes
0 answers
136 views

Implications of adding work account to an android device

Once there's a primary Google account registered on the device and then another work account is added in order to access G Suite of the work place, what are the G Suite administrators are able to ...
Vic's user avatar
  • 121
1 vote
2 answers
705 views

How to protect external hard drive from tampering?

I am looking to buy an external 1TB hard drive to store sensitive information on. External hard drives aren't (physically) small, and it may have to be left unattended at times. What can I do to ...
Nen's user avatar
  • 11
2 votes
2 answers
3k views

Hardening VM for Malware Analysis

I'm starting out in Malware Research / Malware Analysis. I am reading a book called "Practical Guide to Malware Analysis," which touches this in the 2nd chapter, before approaching Dynamical Analysis (...
REbegin's user avatar
  • 21
1 vote
0 answers
357 views

How should you configure PowerShell logs permissions?

I'm currently trying to figure out the best way to configure Windows PowerShell logging, so that it is secure (Attackers cannot gain sensitive data out of it) it helps in DFIR (digital forensic and ...
Ville's user avatar
  • 19
0 votes
1 answer
1k views

For security purposes, can I use vpn with ufw to allow traffic only from the vpn on ubuntu?

Is this possible? If not through ufw then some other software or iptables? How should I set up the ip tables? Assuming my public ip is known (and I don't want to change it), would it provide complete ...
Linux_user0987's user avatar
0 votes
1 answer
296 views

Hardening against Nmap and other network scanners

It is possible to make Server respond with irrelevant data if it is scanned with Nmap? If yes, are there any examples of such SW?
MrSnowMan's user avatar
  • 598
1 vote
1 answer
251 views

RHEL7 SSGv0.1 2.2.3 Unauthorized SUID/GUID executables

We are upgrading to RHEL 7.6. My Nessus scanner is giving me the following message: 2.2.3.c-d Mandatory Review Required: Find unauthorized SUID/GUID System Executables RHEL7 SSGv0.1 2.2.3 Unauthorized ...
Scottie H's user avatar
  • 244

1
2 3 4 5 6