itec 5321 information systems security spring ‘07 slax killbill edition v5.1.8.1 deepanwita bagchi...
TRANSCRIPT
ITEC 5321Information Systems SecuritySpring ‘07
Slax KillBill Edition v5.1.8.1
Deepanwita Bagchi03-03-2007
3/3/2007 Deepanwita Bagchi
Agenda
Why is Security important?
Role of NIST
Different Technical Controls suggested by NIST
What is a Live CD?
SLAX KillBill Edition v 5.1.8.1
How to implement a technical control with SLAX KillBill live CD?
Q/A
3/3/2007 Deepanwita Bagchi
"If you think technology can solve your security problems, then you don't understand the problems and you don't understand the technology."
- Bruce Schneier
3/3/2007 Deepanwita Bagchi
National Institute of Standards and Technology
Non Regulatory agency of the US Department of Commerce’s Technology administration
Suggests control categories to prevent, detect and recover IT systems from security threats. Categories are: technical, managerial and operational
Technical control are subdivided into three categories: Supportive, Preventive and Detective/Recovery
3/3/2007 Deepanwita Bagchi
National Institute of Standards and Technology
Technical Security Controls: Support:
Identification
Cryptographic Key Management
Security Administration
System Protections
Preventive
Authentication
Authorization
Access Control Enforcement
Nonrepudiation
Protected Communications
Transaction Privacy
Detection / Recovery
Audit
Intrusion Detection & Containment
Proof of Wholeness
Restore Secure State
Virus Detection and Eradication
3/3/2007 Deepanwita Bagchi
National Institute of Standards and Technology
Source: http://csrc.nist.gov/publications/nistpubs/800-30/sp800-30.pdf
Technical Security Controls
3/3/2007 Deepanwita Bagchi
Live CD?
Bootable CD with pre-configured software
Easy way to try out multiple operating systems without having to install them
Read-only CD, hard to tamper with
Wide range of distros to choose from while implementing a technical security control
3/3/2007 Deepanwita Bagchi
My Choice?
Slax KilBill Edition v5.1.8.1
Slackware Linux based liveCD
Pocket operating system, merely 204MB
Uses Unification File System (also known as unionfs), allowing read-only filesystem to behave as a writable one, saving all changes to memory.
Why Slax KB? Modularity
Speed
Easy CD/ USB creation
3/3/2007 Deepanwita Bagchi
Default Features in SLAX KB v5.1.8.1 CD
Linux kernel 2.6 offering excellent hardware support
The newest ALSA sound drivers
Ndiswrapper for loading Windows drivers for WIFI cards
Madwifi drivers for native support for WIFI cards (Multiband Atheros)
KDE 3.5 desktop
Webconfig allowing you to save your session data to slax‘ web
3/3/2007 Deepanwita Bagchi
Easy CD creation with MySLAX
3/3/2007 Deepanwita Bagchi
Demo of Easy LiveCD Creation
3/3/2007 Deepanwita Bagchi
Security Modules available in SLAX KB
87 Security Modules available to choose from
Source: http://www.slax.org/modules.php?category=security
3/3/2007 Deepanwita Bagchi
Security Modules I Installed
BCrypt 1.1
Ccrypt 1.7.7
Ethereal 0.10.11
Snort 2.6.0.2
TrueCrypt 4.2a
3/3/2007 Deepanwita Bagchi
Technical Control Implemented
Protected Communications:Truecrypt
& Ccrypt
3/3/2007 Deepanwita Bagchi
Protected Communications (Contd…):
Keyfile created
3/3/2007 Deepanwita Bagchi
Protected Communications (Contd…):
File to be encrypted
Encryption command
3/3/2007 Deepanwita Bagchi
Protected Communications (Contd…):
Encrypted File
Decryption Command
3/3/2007 Deepanwita Bagchi
Protected Communications (Contd…):
Back to original file
3/3/2007 Deepanwita Bagchi
Questions / Comments?