Unix security: Difference between revisions

Revision as of 10:47, 13 April 2024

Revision as of 10:47, 13 April 2024

Line 41:

{{Update section|date=January 2014|reason=Iptables is no longer the "current interface"|inaccurate=yes}}

[[iptables]] is the current user interface for interacting with [[Linux]] kernel [[netfilter]] functionality. It replaced [[ipchains]]. Other [[Unix]] like operating systems may provide their own native functionality and other [[open source]] firewall products exist.

==General==

Secure network communication:

*Layer 7: {{hlist|[[GNU Privacy Guard|GPG]]|[[Pretty Good Privacy|PGP]]}}

*Layers 4,5: {{hlist|[[Transport Layer Security|SSL/TLS]]|[[Stunnel]]|[[S/MIME]]}}

*Layer 3: {{hlist|[[Virtual private network|VPN]]|[[IPsec]]}}

*Layer 2: [[Point-to-point tunneling protocol|PPTP]]

Packet sniffing:

*[[tcpdump]], [[Wireshark]]

Attacks:

*[[Man in the middle attack]]

*[[LAND]], [[ping of death]], [[Christmas tree packet]], [[Denial-of-service attack|Denial of service]] et al.

*Software tools based password/passphrase/key stealing attacks on the system. Such as strace/truss/tusc/dtrace/SystemTap based ones.

==Advanced==