LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 07-06-2016, 04:07 AM   #1
hawkeyesc72
LQ Newbie
 
Registered: Mar 2016
Posts: 12

Rep: Reputation: Disabled
Security recommendations


My work is establishing our cyber defense office and we are looking to install intrusion detection/prevention and vulnerability scanner programs.

We have mostly Windows systems but will have some Linux boxes as well (exact number unknown but not too many). Money is an issue because I work at a military unit so funds are limited to whatever we have been bugeted. We have 4 networks to cover, with 500, 700 and approx 250 and 250 hosts respectively. So not major sized networks but large enough. The biggest setback we are facing is that our networks are separated due to security classification and cannot be physically connected together.

I'm looking for any recommendations on programs you've used and liked at your current or previous places of employment. A single product that can do both would be best but isn't mandatory. Free would be better but paid isn't completely out of the discussion (will just depend on how much and what services it provides because we will have to justify the expense every year).

We've researched Nessus a little but were given a license fee price quote of $32,500/year which we are not sure we could justify to the higher ups.

Thanks in advance for any assistance you can offer.
 
Old 07-06-2016, 04:30 AM   #2
TenTenths
Senior Member
 
Registered: Aug 2011
Location: Dublin
Distribution: Centos 5 / 6 / 7
Posts: 3,475

Rep: Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553
Quote:
Originally Posted by hawkeyesc72 View Post
We have 4 networks to cover, with 500, 700 and approx 250 and 250 hosts respectively.

We've researched Nessus a little but were given a license fee price quote of $32,500/year which we are not sure we could justify to the higher ups.
So that's roughly 1700 hosts, so that works out at ~$20 per machine/year. Seems good value to me.
 
Old 07-06-2016, 04:36 AM   #3
hawkeyesc72
LQ Newbie
 
Registered: Mar 2016
Posts: 12

Original Poster
Rep: Reputation: Disabled
I agree. Unfortunately we aren't sure the higher ups will see it that way. They will see total amount requested versus cost per system breakdown.

Quote:
Originally Posted by TenTenths View Post
So that's roughly 1700 hosts, so that works out at ~$20 per machine/year. Seems good value to me.
 
Old 07-06-2016, 08:57 AM   #4
sundialsvcs
LQ Guru
 
Registered: Feb 2004
Location: SE Tennessee, USA
Distribution: Gentoo, LFS
Posts: 10,659
Blog Entries: 4

Rep: Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941
I would counter that by saying that "$32,500 a year" isn't a lot of money. That's less than half the cost of one, fairly junior, employee.

Furthermore, you say that you work for a miltary office that, I surmise, handles data with at least three levels of classification ... the least of which, I am sure, is (at least) "Confidential." Therefore, information security and intrusion prevention is of "Mission Critical" importance, and every "higher-up" knows it, as do the affected commanding officers.

Therefore, you should focus your attention on, first, ensuring that the proposed system really works, and upon constructing a business military plan for deploying it.

Always remember that "computer software is never 'free,'" even when it is "open source." There is no "F" in the acronym, "FOSS."

"Soldiers won't die" if your office spends money. But they might die if your systems are penetrated. (In any case, your office's mission would be compromised.) Therefore, know when to ignore office politics. Your organization has the money, and, if need be, the willingness to spend it.

Your office could spend one hundred times that amount, or even more, "in the name of information security," if a sufficient case could be built for doing so. Your task is: "to build that case."

You should recommend, not only what should be purchased, but exactly how it should be deployed, and what it will actually cost, per annum, while in service. Future budgets will be drawn-up accordingly.

Don't "duck and run" from office politics. Don't be "penny-wise and pound-foolish." Construct what is, in your professional opinion, the best thing for the organization to do. Then, sell it to those above you, knowing that part of their job is to ask questions and to challenge you.

If you take a tour of the US National Cryptologic Museum, which is located at the headquarters of the National Security Agency (NSA), you will see copies of posters like these, with the additional line: "The Message Is Still The Same." So ... "choose well."

Last edited by sundialsvcs; 07-06-2016 at 09:14 AM.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Linux security book recommendations? Logomachist Linux - Security 2 02-20-2016 08:01 AM
Seeking Recommendations - Security, Stability, and Minimalism cynicalpsycho Linux - Security 23 05-30-2015 12:48 PM
Linux partition security recommendations sulekha Linux - Security 7 11-01-2012 08:46 AM
Security S/W Recommendations JonBL Linux - Security 3 10-13-2006 12:33 PM
need recommendations on security... another2 Linux - Security 3 11-11-2003 08:22 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 06:47 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration