LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   Network Forensic (https://www.linuxquestions.org/questions/linux-security-4/network-forensic-151088/)

satimis 02-27-2004 04:53 AM

Network Forensic
 
Hi all folks,

I am new to network security. I am searching for information/documentation/tools from open source in re

1) mitigate risk of network vulnerabilities
2) detect anomalies
3) to analysis network activity
4) network forensic monitor

Any advice on URL or pointer would be much appreciated.

TIA

B.R.
satimis

souljah 02-27-2004 06:29 AM

As always, I recommend taking a look at freshmeat.net for your opensource software requirements. You should/will find plenty of security auditors and other programs that will be of use in your quest for network security. Other than that, www.linuxguruz.com/iptables/ should assist you in creating a restrictive firewall ruleset.

Hope this helps you get off in the right direction.

J.J.E.

unSpawn 02-27-2004 11:22 AM

I am searching for information/documentation/tools from open source in re

1) mitigate risk of network vulnerabilities
Mind telling us what you have in mind? Are you talking redundancy, out of band communication or just properly configuring, hardening and shielding hosts and networks? (The last one should always be done, no matter what).

2) detect anomalies,
3) to analysis network activity,
4) network forensic monitor

Check out the LQ FAQ: Security references, post 3.

Any advice on URL or pointer would be much appreciated.
Freshmeat is cool if you're hunting for SW, but it doesn't teach you security basics. Read some, experiment, ask some more before you blindly deploy the first thing you got compiled I'd say.

satimis 02-27-2004 11:48 AM

Hi folks,

Tks for your advice.

After having attended a seminar in re of security on network and its integration to physical security curiosity and interst push me starting collecting information and knowhow on this subject. At this preliminary stage I would not deploy anything. My need is to accumulate/collect sufficient knowhow/information first.

Re mitigate risk of network vulnerabilities
No special subject targeted, only collecting general information.

B.R.
satimis


All times are GMT -5. The time now is 09:40 PM.