Assessing Security Appliances
We have several appliances performing specialized tasks in our environment. I've been asked to perform an audit of these appliances. Since most of these appliances run a version of Linux/Unix I've decided to audit in a two phase process. First looking at the OS/Kernel and then the application.
My question is there an auditing framework for these appliances that ensure that critical areas are not overlooked because of a lack of experience?
Software/Hardware used:
Software/Hardware used:
ASKED:
February 23, 2007 4:36 PM
UPDATED:
February 25, 2007 2:08 PM
Answer Wiki:
Here are some good places to start:
www.sans.org reading room
www.cisecurity.org (Center for Internet Security)
Bob
To see all answers submitted to the Answer Wiki: View Answer History.
RSS - Discussions Help
Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
