What is your understanding of operating systems vulnerabilities and hardening pr
ID: 3729899 • Letter: W
Question
What is your understanding of operating systems vulnerabilities and hardening practices? How should one go about in hardening operating systems and applications, such as a Web Sever? (For hardening of operating systems, you should choose one operating system. For example, you could choose, Windows, Unix, Mac, etc). Do you think one system is really better than the others or, it is personal preference? Explain your answer. What are some reasons why an organization would choose one operating system over another? Explain in terms of systems security.
Explanation / Answer
A vulnerability is a weakness which allows attackers to reduce system information assuarance.it is intersection of three elements stated below:
some of UNIX operating system vulnerabilities are:setuid problems,trozen horses ,terminal troubles.
on the other hand windows operating system vulnerabilities are password & peer to peer file sharing
LInux vulnerabilities are uninitialized data ,memory mismanagement,missing permission check
Hardening means to making operating system secure making it bulletproof .means providing protection from any vulnerabilities ,creating rules and policies which can help to secure it.and minimizing unnessasry applications and services.in linux server hardening is done.
these are the steps to hardening in o.s such as web servers in windows:
1.think of security from beging
2. configuring security policies
3.disabiling and removing unnessasary ports,accounts and services
4.setting up of appropriate access control and logical components.
5.creating baseline backups
6.always keeping an eye on accounts login
if we go by security purpose then mac operating system is best in terms of security after that linux and then it comes to windows .windows operating system is less secure.
high system security : mac > linux > windows
Related Questions
drjack9650@gmail.com
Navigate
Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.