|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/linux-security-network-hardening-practical-defense/
课程评论：没有评论
课程名称：Linux安全与网络加固：实用防御 课程概述：本课程为您提供必要的知识和实践技巧，以确保Linux系统的安全，涵盖系统日志、审计、数据安全和服务加固等关键方面。课程从系统日志和审计基础入手，您将学习如何使用syslog和rsyslog设置安全的Linux日志，管理journald的系统日志，并通过强大的密码管理和使用John the Ripper进行审计来确保问责制。您还将探讨Auditd以跟踪文件系统访问，分析SUID和SGID权限，以识别潜在的漏洞。最后，您将学习如何使用fail2ban保护SSH服务，以防止暴力破解攻击。 在数据安全部分，您将掌握使用LUKS进行磁盘加密，确保静态数据的保护。您还将学习使用GPG加密单独的文件，并通过SSH加密网络流量，以防止数据泄露。 服务加固部分将使您掌握高级技术，包括理解和定制SELinux以执行安全策略。您将探索chroot监狱的概念，以限制应用程序并最小化风险。最后，您将接触LXC容器，学习设置和管理轻量级Linux容器，以隔离服务并增强安全性。 课程结束时，您将掌握实用且可操作的知识，以强化您的Linux系统，从而使您成为一名更高效、更注重安全的Linux管理员。
This course equips you with essential knowledge and hands-on techniques to secure Linux systems, covering critical aspects of system logging, auditing, data security, and service hardening.Starting with System Logging and Auditing Essentials, you'll learn how to set up secure Linux logging using syslog and rsyslog, manage system logs with journald, and ensure accountability through robust password management and auditing using John the Ripper. You'll also explore Auditd for tracking file system access and analyze SUID and SGID permissions to identify potential vulnerabilities. Finally, you'll learn how to secure your SSH service using fail2ban to protect against brute-force attacks.Moving into Data Security, you'll master disk encryption with LUKS, ensuring data protection at rest. You'll also learn to encrypt individual files with GPG, and secure network traffic using SSH to prevent data breaches.The Securing Services section empowers you with advanced techniques, including understanding and customizing SELinux to enforce security policies. You'll explore the concept of chroot jails to contain applications and minimize risks. Finally, you'll get introduced to LXC containers, setting up and managing lightweight Linux containers for isolating services and enhancing security.By the end of this course, you'll possess practical, actionable knowledge to fortify your Linux systems, making you a more proficient and security-conscious Linux administrator.
