Bezpečnost operačních systémů

Abstract

The thesis is destined to provide basic information about the risks related to usage and management of Linux-based operating systems. The first chapter emphasizes the problems of reaching absolute security state in the Internet environment. Subsequently, techniques used for information gathering are described, as well as the two most popular network-level attack types. The next chapter shows the implications of standard/web application exploitation and possible countermeasures. The thesis also mentions the two most implemented services (Apache, OpenSSH), their setting options and its impact regarding to overall system security. Last part describes two kernel modifications destined to offer finer-grained security policies and observes their reaction to local privilege escalation attack attempts.