University of Central Florida

Information Security

DSC      Report an Incident
Quick Links
Home
Security Tips for everyone
Security Tips for IT
Rules of the Road
Server Security Standards
Computer Security Standards
Legal Matters
 
Network Operations Center
ResNet
Service Desk

 

Security Sites
CERT
CIS
INCIDENTS
LINUX SECURITY
DHS
SANS
SARC
SECURITY FOCUS
US-CERT

Security Tools  (Windows, Linux, and Solaris)

General Tools:

  • SSH (Secure Shell)
    • Use SSH instead of Telnet or rlogin
    • A good program to use is Putty. Download here
  • Synchronizing Time
    • To effectively investigate compromises or security incidents it is necessary to have clocks synchronized to a common system (NTP - Network Time Protocol)
      • Install synchronizing software such as Netlab for Windows
      • UCF Time Server:  aquarius.cc.ucf.edu (132.170.240.15)
  • Free Antivirus Software for Windows
    • All systems must run some antivirus software package.
    • Virus signature files must be kept current. At a minimum, update virus signature
    • files weekly.
    • A good free one may be obtained from AVG Antivirus

 

Microsoft Windows Tools:

  • Microsoft Baseline Security Analyzer

    • MBSA runs on the latest flavor of Windows and can scan for missing hotfixes and vulnerabilities in Microsoft products.
    • All Windows administrators are expected to use this tool to check their patch status.
    • Download at http://www.microsoft.com/technet/security/tools

 

Linux Tools:

  • Red Hat Linux

    • Use Update Agent to retrieve the latest software packages from Red Hat. Using this tool will allow you to always have the most up-to-date Red Hat Linux system with all security patches and bug fixes.
      • On the GNOME desktop, go to the Main Menu Button (on the Panel) => Programs => System => Update Agent
      • On the KDE desktop, go to the Main Menu Button (on the Panel) => Red Hat => Update Agent
      • Type the command up2date at a shell prompt (for example, an xterm or gnome-terminal)

       

Solaris Tools:

All contents are copyrighted
Maintained by the Information Security Office
Computer Services & Telecommunications