Tuesday, October 18, 2005

"Hardening"

This is one word that we, Security professionals, take for granted. I used this word during a conversation with Jim last weekend and he was like "What???".
People... here's a definition and background into "hardening". The actual term should be "OS hardening" but is generally shortened to just "hardening". This is defined as the steps taken to secure an Operating System (OS such as Windows, Linux, Solaris) by patching, changing configurations and removing unnecessary services/applications. Why the need for hardening? Well its basically because OSs come default with a lot of crap enabled on it and may not be updated with the latest security patches either.
There is a common misconception that only Windows is insecure. That's sooooooo wrong because Linux, Solaris and even Macs are insecure as well. It is very dangerous to think either wise. Have you "hardened" your OS today?

No comments: