|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/secure-and-hardening-linux/
课程评论：没有评论
**Linux安全与加固课程总结** 本课程聚焦于Linux系统的安全加固，旨在教授学员如何通过多种技术手段，显著降低Linux系统面临的潜在安全风险，缩小其攻击面。 **核心概念：** * **系统加固（Hardening）**：核心在于通过减少系统功能、移除不必要的软件、用户、登录和关闭不必要的服务等方式，来降低系统的脆弱性。系统功能越少，其攻击面通常越小。 * **减少攻击面**：这是加固的核心目标，意在通过精简系统，移除潜在的攻击路径（攻击向量）。 * **加固策略**：课程会涵盖诸如“零信任”（Zero Trust）、“最小权限原则”（Principle of Least Privilege, PoLP）以及“纵深防御”（Defense In Depth）等重要的安全策略。 * **具体加固措施**：课程将指导学员完成一系列实际操作，包括但不限于： * 实施员工安全培训 * 对资源进行分段隔离 * 自动化安全更新 * 重置默认密码 * 对密码进行哈希处理 * 确保数据在存储和传输过程中进行加密 **课程价值：** 学习本课程后，您将掌握对Unix和Linux系统进行有效安全加固的技能，从而显著提升系统的安全性，抵御各种网络攻击。
In computer security, Hardening is usually the process of Securing a system by Reducing its surface of vulnerability, which is larger when a system performs more functions; in principle, a single-function system is more secure than a multipurpose one. Reducing available ways of attack typically includes changing default passwords, removal of unnecessary software, unnecessary usernames or logins, and disabling or removal of unnecessary services.What is Hardening means: Hardening, when applied to computing, is the practice of reducing a system's vulnerability by reducing its attack surface.Hardening may involve a reduction in attack vectors by culling the pathways, or vectors, attackers would use. It may range from adhering to blanket policies such as Zero Trust, the Principle of Least Privilege (PoLP), or Defense In Depth, but also manifest as certain task lists such as implementing workforce training, segmenting resources, automating security updates, resetting default passwords, hashing passwords, and ceasing to store or transmit data unless it is encrypted.Reducing attack vectors through hardening also involves system owners cutting unnecessary services or processes. Overall, a system that provides more services has a much broader attack surface than one performing just one function.In this course, You will learn how to hardening your Unix and Linux systems.
