Hardening Task
A Hardening Task is a Computer Security Task that for reducing its surface of vulnerability.
- Example(s):
- Counter-Example(s):
- See: Computer Network, Operating System, Computer Security System, Daemon_Computer_Software), Unix, Linux, Operating System Kernel, Firewall.
References
2018
- (Wikipedia, 2018) ⇒ https://en.wikipedia.org/wiki/Hardening_(computing) Retrieved:2018-5-13.
- In computing, hardening is usually the process of securing a system by reducing its surface of vulnerability, which is larger when a system performs more functions; in principle a single-function system is more secure than a multipurpose one.
Reducing available ways of attack typically includes changing default passwords, the removal of unnecessary software, unnecessary usernames or logins, and the disabling or removal of unnecessary services.
There are various methods of hardening Unix and Linux systems. This may involve, among other measures, applying a patch to the kernel such as Exec Shield or PaX; closing open network ports; and setting up intrusion-detection systems, firewalls and intrusion-prevention systems. There are also hardening scripts and tools like Lynis, Bastille Linux, JASS for Solaris systems and Apache/PHP Hardener that can, for example, deactivate unneeded features in configuration files or perform various other protective measures.
Hardening activities include:
- Keeping security patches updated
- Installing firewall
- Closing certain ports
- Not allowing file sharing among programs
- Installing virus and spyware protection
- Using containers or virtual machines
- Creating strong passwords
- Keeping a backup
- Disabling cookies
- Using encryption when possible
- In computing, hardening is usually the process of securing a system by reducing its surface of vulnerability, which is larger when a system performs more functions; in principle a single-function system is more secure than a multipurpose one.