NewsForge: Bastille's Beale: How to Avoid Security Problems, Linux vs. Windows Security
Nov 06, 2002, 07:00 (4 Talkback[s])
(Other stories by Grant Gross)
"We went to Jay Beale with our questions about the current state
of Linux security. He's a security consultant specializing in host
lockdown, network security and security audits. Jay also serves as
lead developer of the Bastille project, which creates a hardening
script for Linux and HP-UX, is a member of the Honeynet Project,
and is a core participant in the Center for Internet
Security...
"Linux.com: It seems as if malicious hackers are
targeting Linux more lately, perhaps because of its growing
popularity. Recently, there have been reports of the Slapper and
Mighty worms. Do you see that trend?
"Beale: I really don't see that kind of trend
here. Most of the vulnerability hunting that gets done isn't really
this targeted. It's much more opportunistic. People found some
juicy vulnerabilities in Apache and wrote exploits. A little later,
people start writing worms to automate the process. This happens
often enough. Honestly, I feel safer on Linux partly because worms
are such a rare occurrence, compared to the Windows world, which
has to spend so much time fighting each and every one. So far,
we've been a lot safer on Linux..."
Complete
Story
Related Stories: