Attacking and Securing RedHat
Jay Beale examines description from DEF CON 9 Speaker’s Page: Attacking & Securing Red Hat AKA How Effective Has Bastille Linux Been.
Summary
Architecture and Background
Description from DEF CON 9 Speaker’s Page: Attacking & Securing Red Hat AKA How Effective Has Bastille Linux Been? This talk will demonstrate each of the major (widely available) exploits against Red Hat 6.x, before and after hardening the system with Bastille Linux.
Vulnerability Analysis
The idea is to show, very concretely, how Bastille Linux was effective at stopping/containing attacks, before the exploit was ever written. This is not simply a "product demo" for an Open Source tool, though!
Exploitation and Demonstrations
We'll describe exactly what hardening steps are taken to combat each attack and illustrate how these prevented/contained a compromise. Jay Beale is the Security Team Director at MandrakeSoft, makers of Mandrake Linux.
Remediation and Defensive Strategies
He is also the Lead Developer of the Bastille Linux Project, which creates a hardening program for Linux. Jay is the author of a number of articles on Unix/Linux security, along with the upcoming book Securing Linux the Bastille Way, to be published by Addison-Wesley. You can learn more about his articles, talks and favorite security links via
Related talks
Main Stage·50 min
Chris Hurley
Chris Hurley - Hardening Solaris Installs A step by step guide to hardening a Solaris installation.
The Linux Foundation·20 min
Baoli Zhang
Presents prioritizing the Linux OS Hardening and CVE Mitigation and evaluates key implications for security practitioners.
SAINTCON·56 min
Eric Bennick
Security researchers examine technical aspects of Eric Bennick - System Administration with a Side of Security.