Attacking & Securing Red Hat AKA How Effective Has Bastille Linux Been?

Presented at DEF CON 9 (2001), July 14, 2001, noon (50 minutes).

This talk will demonstrate each of the major (widely available) exploits against Red Hat 6.x, before and after hardening the system with Bastille Linux. The idea is to show, very concretely, how Bastille Linux was effective at stopping/containing attacks, before the exploit was ever written. This is not simply a "product demo" for an Open Source tool, though! We'll describe exactly what hardening steps are taken to combat each attack and illustrate how these prevented/contained a compromise.

Presenters:

• Jay Beale
  Jay Beale is the Security Team Director at MandrakeSoft, makers of Mandrake Linux. He is also the Lead Developer of the Bastille Linux Project, which creates a hardening program for Linux. Jay is the author of a number of articles on Unix/Linux security, along with the upcoming book Securing Linux the Bastille Way, to be published by Addison-Wesley. You can learn more about his articles, talks and favorite security links via http://www.bastille-linux.org/jay.

Links:

• https://defcon.org/html/defcon-9/defcon-9-speakers.html#Jay Beale
• https://www.youtube.com/watch?v=uPjP7T-L8JE

Similar Presentations:

• DEF CON 14 (2006) / Discovering Mac OS X Weaknesses and Fixing Them with the New Bastille OS X Port
• DEF CON 13 (2005) / Introducing the Bastille Hardening Assessment Tool
• DEF CON 10 (2002) / Bastille Linux 2.0: Six Operating Systems and Still Going!