Questions tagged [hardening]

the process of tightening security on a system.

22 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
7
votes
0answers
211 views

Using instruction set architecture (ISA) to stop stack overflows

I have been learning about using stack overflows to get arbitrary code execution, one of the tricks used is overwriting the return address to make control flow go the way you want it. Assuming our ...
3
votes
0answers
379 views

Harden / Lock down SMB share

We have to use an embedded SMB server to transfer medical records to and from patients' phones. The medical records are AES-encrypted on the phones, in transit and on the embedded device. But then... ...
2
votes
0answers
157 views

How to harden portable Tor Browser installation (SELinux, sandbox)?

tldr How can I define a SELinux policy, that limits filesystem access of portable Tor Browser to its installation directory, say /home/user/.local/opt/tor-browser_en-US? How might Tor Browser be ...
2
votes
0answers
84 views

Implications of adding work account to an android device

Once there's a primary Google account registered on the device and then another work account is added in order to access G Suite of the work place, what are the G Suite administrators are able to ...
2
votes
0answers
358 views

Hardening evaluation of shared objects files

In order to evaluate if security mechanisms are applied on binary files during compilation I usually use the checksec tool. My question is: if I want to check an .so file, which checksec's fields ...
2
votes
0answers
73 views

Mobile processors with hardware support for efficient bounds checking

Are there any mobile or embedded processors that provide hardware support for efficient bounds checking? Intel's newest x86 processors provide MPX, which enables compilers to add automatic bounds ...
1
vote
0answers
250 views

Hardening WMI: Any security benefit to changing Impersonation level & separately, setting 'Winmgmt Standalonehost?'

Question #1 Does changing the Default Impersonation Level in WMI to "anonymous" or "identify" help mitigate against WMI exploitation, implants, and persistent threats on a local ...
1
vote
0answers
141 views

Setup guide for Privileged Access Workstation on Windows 10

I am setting up a Privileged Access Workstation (PAW) to access a whitelist of websites. Currently I have been following this guide on Github by unassassinable and applying the latest Windows 10 ...
1
vote
0answers
163 views

Tightly locking down a FreeBSD jail

Suppose one is running a single internet-facing daemon, as a service in a FreeBSD jail, and expects targeted hostile attacks targeting open WAN ports and services. Like many services, the service and ...
1
vote
0answers
192 views

How should you configure PowerShell logs permissions?

I'm currently trying to figure out the best way to configure Windows PowerShell logging, so that it is secure (Attackers cannot gain sensitive data out of it) it helps in DFIR (digital forensic and ...
1
vote
0answers
157 views

Secured Web Browsing

What can be done to make a setup for super secured web browsing? I've been looking at something like this: Windows host > Sandboxie > Virtualbox > Linux Guest > Web Browser (Chrome with uBlock ...
1
vote
0answers
147 views

DLL preloading attack - are IAT libraries affected too?

I'm about to distribute a dll library (there's also a linux version) to my users but I'm afraid of dll preloading attacks (i.e. someone substituting its malicious dll to get called by mine and gain ...
0
votes
0answers
33 views

How to only allow whitelisted processes to access a certain file using SElinux?

Let's say you have a important file/folder, and want to only allow certain processes (based on process name, or its corresponding ELF file on the disk, or the digital signature of the corresponding ...
0
votes
1answer
69 views

Is it possible to protect browser credentials from malicious processes?

What items should be considered to create a browser that prevents all access to stored credentials by a malicious process? Hardware attacks being out of scope. Are there public projects addressing ...
0
votes
0answers
24 views

SECCOMP inside a docker container adds an extra layer of security?

Does hardening with SECCOMP a binary running inside a Docker container brings extra security? I can find many articles/papers about hardening the container itself but very few things about hardening ...
0
votes
2answers
292 views

Does VNC need hardening when inside LAN (home network)?

This is a very newbie question, but I would just like to make sure that I'm not missing anything: If I connect via VNC protocol to my various servers etc. inside my own LAN (home network), then should ...
0
votes
0answers
348 views

Secure partitioning: does LVM affect hardening guidelines?

this is the second of a series of questions on hardening Linux servers at the filesystem level. The first is here. The same scenario applies; I copy it here for convenience: At work I'm hardening an ...
0
votes
0answers
346 views

Secure mount options in Ubuntu CIS benchmarks too narrow?

this is the first of a series of questions on hardening Linux servers at the filesystem level. At work I'm hardening an Ubuntu 18.04 Server following the CIS benchmark 2.0.1. Instead of just running ...
0
votes
1answer
156 views

How to safely reinstall Windows in Thailand - avoiding BadUSB/SSD

I have newly bought HP Pavilion laptop, which i am planning to nuke and reinstall. I really do not like the bloatware as it might posses a security risk. However, in Thailand, i do not trust the ...
0
votes
0answers
62 views

How to protect certain macOS user directory from unauthorized access?

I have several directories on my Mac, two most popular examples are: ~/.aws ~/.ssh They can be read by any script file or third-party app in system. I do not see a way to protect them in macOS (...
0
votes
0answers
50 views

Electron app generating one-time access codes vs server generated codes

I'm designing a kiosk to use one-time SMS codes as a method of authentication. The method I'm using to generate codes happens inside of an Electron application running on a locked down kiosk, hardened ...
0
votes
0answers
78 views

Is it possible to lock guest VMs (or processes) to sticks of physical RAM to prevent row hammer attacks?

I was wondering if it is possible through some means to isolate processes (or preferably guest VMs) to physical sticks of RAM. This would be to prevent row hammer like attacks from using physical ...