Comprehensive Linux Security and Hardening Techniques Course Overview

[Music] you let's begin with the course overview in

this course will cover security and hardening techniques that apply to any Linux based server or workstation our

goal is to make it harder for the bad guys to do nasty things to your systems let's look at each section in detail now

section 1 running Linux in a virtual environment gives an overview of the IT security landscape and will inform the

viewer of while learning Linux security would be a good career move we'll also cover how to set up a lab

environment for performing hands-on exercises we'll also show how to set up a virtualized lab environment for

performing the hands-on labs the second section securing user accounts covers the dangers of always using the root

user account and we'll introduce the benefits of using pseudo instead well then cover how to lock down normal

user accounts and ensure that the users use good quality passwords section three securing your server with a firewall

involves working with the various types of firewall utilities section four encrypting and SSH

hardening make sure that important information both at rest and in transit are safeguarded with proper encryption

for data in transit the default secure shell configuration is anything but secure and could lead to a security

breach if left as is this section shows how to fix that section five mastering discretionary access control covers how

to set ownership and permissions on files and directories we'll also cover what Sui D and s GI D

can do for us and the security implications of using them we'll wrap things up by covering extended file

attributes the sixth section access control lists and shared directory management explains that normal Linux

file and directory permission settings aren't very granular with access control lists we can allow only a certain person

to access a file or we can allow multiple people to access a file with different permissions for each person

we're also going to put what we've learned together in order to manage a shared directory for a group section

seven implementing mandatory access control with SELinux and app armour talks about SELinux which is a mandatory

access control technology that is included with red hat type Linux distros we'll give a brief introduction here

about how to use selinux to prevent intruders from compromising the system app armor is another mandatory access

control technology that is included with Ubuntu and SUSE type Linux distros we'll give a brief introduction here

about how to use app armor to prevent intruders from compromising a system the last section scanning auditing and

hardening discusses that viruses aren't yet a huge problem for Linux users but they are for Windows users

if your organization has windows clients that access the Linux file service then this section is for you you can use

audit D to audit which accesses either files directories or system calls it won't prevent security breaches but it

will let you know if someone authorised person is trying to access a sensitive resource

s-see AP the security content application protocol is a compliance framework promulgated by the National

Institute of Standards and Technology open SCA P the open-source implementation can be used to apply a

hardening policy to a Linux computer this course is an advanced level guide filled with real-world examples that

will help you secure your Linux system by the end of this course you will be equipped with many tools at your

disposal which will help you fully protect your system to get the most out of this course you don't need much

however these things would be helpful a working knowledge of basic Linux commands and of how to navigate through

the Linux file system a basic knowledge about tools such as less and grep familiarity with command line editing

tools such as VI m or Nano a basic knowledge of how to control system D services with systemctl commands for

hardware you don't need anything fancy all you need is a machine that's capable of running 64-bit virtual machines so

let's get started I promise you a great journey [Music]