Server Security
Standard server installations are generally designed for the ease of use and management. They often fail to meet the security requirements for commercial deployment, especially in a constantly evolving networked environment. Without appropriate enhancements and regular reviews, insecure services, redundant system applications and weak system configurations can leave the server highly vulnerable to attack. Once the system is compromised, attackers may leverage on the elevated privileges to perform further attacks on the network. Systems must therefore be hardened to withstand potential attacks. Nevertheless, excessive system hardening will severely limit functionality and usability. Optimal systems configurations can only be achieved after a detailed cost-benefit analysis based on the business needs.
SIFT has proven knowledge and experience in assessing and hardening systems on a variety of operating systems and platforms:
- Microsoft Windows
- Linux
- Unix
- Cisco
- Oracle
- Blackberry
SIFT combines a wealth of knowledge and experience in systems hardening and analysis, with recognised security industry best practice standards from local and international organisations such as:
- Centre for Internet Security (CIS)
- Defence Signals Directorate (DSD)
- US National Security Agency (NSA)
- US National Institute of Standards and Technology (NIST)
- Microsoft
This enables us to develop server hardening strategies that will meet a client's business objectives whilst still providing a high degree of security assurance.
For more information regarding Server Security, please contact us.
|