| Microsoft Windows NT Server |
- La página principal de NT Server es http://www.microsoft.com/ntserver/ProductInfo/default.asp, donde se indican requerimientos del sistema y la lista de compatibilidad de hardware.
- En http://www.microsoft.com/ntserver/techresources/security/default.asp pueden encontrarse whitepapers del año 1997 sobre el hardening de Windows NT; entre ellos Securing NT Installation y documentación acerca de cómo implementar passwords fuertes, hardening del servidor Internet Information Server, y el Microsoft Security Configuration Tool Set (subconjunto del Microsoft Managent Console).
- Los Service Packs y parches críticos pueden encontrase en http://www.microsoft.com/ntserver/nts/downloads/default.asp
- Microsoft Network Security Hotfix Checker (Hfnetchk.exe) es una herramienta que comprueba a través de Internet cuales son los Service Packs instalados y cuales son los que faltan. http://support.microsoft.com/support/kb/articles/q303/2/15.asp
- La última versión disponible del Microsoft Network Security Hotfix Checker (Hfnetchk.exe) http://www.microsoft.com/Downloads/Release.asp?ReleaseID=31154
- La última versión a principios de Agosto es el Service Pack 6a http://www.microsoft.com/ntserver/nts/downloads/recommended/sp6/default.asp y los parches acumulativos hasta el 26 de Julio http://www.microsoft.com/ntserver/nts/downloads/critical/q299444/default.asp
- Definitivamente no saldrá al mercado el Service Pack 7 http://www.microsoft.com/ntserver/sp7.asp, sin embargo ya está disponible el Post-Windows NT 4.0 Service Pack 6a Security Rollup Package (SRP) con todos los parches de seguridad posteriores al Service Pack 6a http://support.microsoft.com/support/kb/articles/q299/4/44.asp?ID=299444. Nótese que SRP en realidad es un nombre de marketing para el último parche acumulativo.
- Los parches de la versión española se encuentran en ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/spa/nt40/
- Dentro de los checklists y utilidades de seguridad http://www.microsoft.com/technet/treeview/default.asp?url=/technet/itsolutions/security/tools/tools.asp, son muy interesantes los checklist de NT Server, NT workstation, C2 e IIS; además de la utilidad Qfix que permite añadir varios parches con un único reinicio.
- Microsoft Personal Security Advidor es un escaneador on-line para comprobar la seguridad de Windows NT y 2000 http://www.microsoft.com/TechNet/mpsa/start.asp
- Securing a Windows NT Server http://www-nt.stanford.edu/ServerSetup/Security.html
- Building a Windows NT bastion host in practice v1.3http://people.hp.se/stnor
- Armoring NT http://www.enteract.com/~lspitz/nt.html
- http://www.ntfaq.com/security.html
Windows 2000 Magazine network ---> Security
- http://www.systemexperts.com/win2k.shtml
Windows 2000 Magazine Security HandBook
- Security Patchs
http://www.microsoft.com/technet/security/current.asp
- NT Recommended Updates and Service Packs
http://www.microsoft.com/ntserver/nts/downloads/default.asp
- Utilidades del libro Securing Windows NT/2000 Servers for the Internet OpenSSH, Network Time Protocol, Virtual Network Computing, NTSyslog y enlaces a Cygwin, Perl for Cygwin, TCP Wrappers, OpenSSL y OpenSSH.
http://examples.oreilly.com/securwinserv/readme.html
- Windows 95/98 Computer Security Information http://www.cert.org/tech_tips/win-95-info.html
- Windows NT Configuration Guidelines http://www.cert.org/tech_tips/win_configuration_guidelines.html
- Windows NT Security and Configuration Resourceshttp://www.cert.org/tech_tips/win-resources.html
- Windows NT Intruder Detection Checklisthttp://www.cert.org/tech_tips/win_intruder_detection_checklist.html
- Steps for Recovering from a UNIX or NT System Compromise http://www.cert.org/tech_tips/win-UNIX-system_compromise.html
- Errores del Event Viewer http://www.megerle.de/tips/nt_err.htm
|
| Solaris |
El artículo The Unix Auditor's Practical Handbook es una buena guía paso a paso de securización
de sistemas Solaris
- The Sun BluePrints program is Sun's leading source for in-depth technical information on best practices using Sun[tm] solutions. Sun BluePrints OnLine is a Web-based, monthly magazine containing current articles on the latest best practices.
http://www.sun.com/security/blueprints/
- SunFreeware, software GNU
http://www.sun.com/bigadmin/downloads/indexFree.html
- SolarisHelp http://www.solarishelp.com
- SunHelp http://www.sunhelp.org
- SunWorld http://www.sunworld.com
- SunGuru http://www.sunguru.com/
- Recommended and Security Solaris Patch Clusters http://sunsolve.sun.com/pub-cgi/show.pl?target=patches/patch-access
- Solaris Package Archive http://sunsite.cnlab-switch.ch/www/mirror/solaris-binaries/sparc/
- The Solaris Security FAQ http://www.sunworld.com/sunworldonline/common/security-faq.html
- Armoring Solaris http://www.enteract.com/~lspitz/armoring.html
- How to install Solaris and have a good host security http://yassp.parc.xerox.com/
- Solaris Security Guide http://www.sabernet.net/papers/Solaris.html
- The Solaris[tm] Security Toolkit, informally known as the JumpStart[tm] Architecture and Security Scripts (JASS) toolkit, provides a flexible and extensible mechanism to minimize, harden, and secure Solaris Operating Environment systems. The primary goal behind the development of this toolkit is to simplify and automate the process of securing Solaris systems.http://www.sun.com/security/jass/
- Solaris 9 http://www.sun.com/solaris/programs/solaris9ea/
- Securing a Solaris Systemhttp://www.accs.com/p_and_p/SolSec/
- Unix Security CheckList http://www.cert.org/tech_tips/AUSCERT_checklist2.0.html
- Building a Solaris Host http://secinf.net/info/unix/solaris_hardening.html
- Minimum Solaris 8 (64 bit) packages:
install Solaris 8 Core flavor;
install Mandatory Packages (SUNWlibC, SUNWlibCx, SUNWter, SUNWadmc, SUNWadmfw, SUNWscpr,SUNWscpu,SUNWscpux, SUNWsra, SUNWsrh, SUNWmdb, SUNWmdbx, SUNWtoo);
install SUN recommended patch cluster 108528-14,
install 109326-07 (libresolv.so.2 and in.named patch),
110723-04 (/kernel/drv/sparcv9/eri patch),
108434-01 (32-Bit Shared library patch for C++),
108435-01 (64-Bit Shared library patch for C++);
the following packages can be removed (
SUNWadmr, SUNWatfsr, SUNWatfsu, SUNWauda, SUNWaudd, SUNWauddx, SUNWcg6, SUNWcg6x,
SUNWdfb, SUNWdtcor, SUNWfcip, SUNWfcipx, SUNWfcp, SUNWfcpx, SUNWfctl, SUNWfctlx,
SUNWftpr, SUNWftpu, SUNWi15cs, SUNWi1cs, SUNWkey, SUNWluxdx, SUNWluxop, SUNWluxox,
SUNWm64, SUNWm64x, SUNWmdi, SUNWmdix, SUNWnamow, SUNWnisr, SUNWnisu, SUNWpcelx,
SUNWpcmci, SUNWpcmcu, SUNWpcmcx, SUNWpcmem, SUNWpcser, SUNWpl5u, SUNWpsdpr,
SUNWrmodu, SUNWses, SUNWsesx, SUNWsndmr, SUNWsndmu, SUNWsolnm, SUNWssad,
SUNWssadx, SUNWtleux, SUNWudf, SUNWudfr, SUNWudfrx, SUNWusb, SUNWusbx, SUNWwsr2,
SUNWxwdv, SUNWxwdvx, SUNWxwmod, SUNWxwmox).
|