Slashdot Mirror

← Back to Stories (view on slashdot.org)

Internet Security Standards

Posted by michael on from the sorely-needed dept.

Aetius writes "The Center for Internet Security has released a set of security standards and tools for several operating systems. Here's the ZDNet story. I checked out the Linux standard and it is a pretty good coverage of the basics; about the only thing missing was a simple firewall treatment. I installed it on my wide-open desktop system (RH 7.3) and scored a 6.61 out of 10, which doesn't seem too bad. The scanner code isn't open source, but it's perl so you can at least look at it. You have to register to download it. If nothing else, the PDF of the standards is a good read. Enjoy."

2 of 135 comments (clear)

  1. Tech?Update by cos(0) · · Score: 3, Interesting

    Ironically, ZDnet's "techupdate.zdnet.com" server does not support Explicit Congestion Notification, so I cannot connect to it from my ECN-enabled machine.

    *sigh*

  2. Re:Good for the Very Basics by Anonymous Coward · · Score: 1, Interesting

    You seem pretty defensive of your job. Couldn't bear the thought that with the proper security tools, your job may go to someone less qualified. Typical.