BSD Security Fundamentals

Architecture and Background

Sean Lewis - BSD Security Fundamentals FreeBSD security fundamentals will cover some security basics as well as advanced topics on FreeBSD host and network security. Emphasis will be on hardening a FreeBSD machine from the inside-out, locking down ports, services, filesystems, network activity, etc.

Vulnerability Analysis

Some of the material presented in this talk will be BSD-agnostic, and some will apply to a UNIX environment in general. Review of several recent UNIX security vulnerabilities and valuable information on monitoring and safeguarding your system as well as your network.

Exploitation and Demonstrations

Sean Lewis has over six years of computer security experience, focusing mainly on UNIX systems - hardening, penetration testing and kernel-level lockdown of servers in various roles. Sean has designed systems for various large organizations that assume critical network roles and must be among the top host-based secured machines on the network.

Remediation and Defensive Strategies

Using open source technology, these systems are not only some of the most secure machines you can find, they are also some of the least expensive. Sean is a Checkpoint Certified Security Administrator, and has in-depth knowledge of firewall installation and maintenence as well as penetration testing and evasion tactics with popular firewall products in use in Corporate America. Sean has also designed networks of varying scales, including a high-speed, high-availibility B2B e-business trading infrastructure that attracts millions of hits per month. Sean also has experience with Windows NT and 2000 security as well as a large deal of work with networking devices such as switches and routers. He also has published several documents regarding Windows NT and IIS security, including 'quick checklists' for post-installs and ongoing maintenence currently in use by several large organizations.