Rough sidenotes i used for a presentation on open source security solutions for the handsonlab open source @ schoten 18th of october 2011

2. RIP Dennis Ritchie (1941 - 2011)

11. Open source / Linux user since 1993

12. Founder of Better Access (°1996) / BA (°2003)

13. Open Source Fundamentalist (in my free time)

14. Pass a lot of my time in the lab

16. Rolled into it by putting securityproblems in the lab and proving they are real !

17. But I have been researching and trying to develop solutions since 1996.

19. Infosecurity

20. Who are you ?

22. Monitoring Platform

23. Packaged Antispam

25. Developping custom solutions largely based on open source

27. Politicians

29. Integrity

30. Availability

32. Allways balance between useability / security

33. Common sense is the best security product

35. Good systemadministration

36. Keep in the back of your head that things can go wrong

38. No security by obscurity

42. But also: Facebook, Amazon, Google

44. Setup servers in a correct way

45. Hostbased IDS

51. Bad webinterfaces

57. Checks / logs every request

58. Prevent known security problems

59. Temporally patch new holes in your webapp

60. Logs everything for forensic research

63. Security through kerberos

65. Certificates, tokens

69. Password based

71. There was an excellent solution : Ssl explorer

72. Bought by Barracuda, no more open source dev

73. Fork Adito, later Openvpn ALS but not really a lot of development

76. Good distro: backtrack

79. Misconfiguration (e.g. open mail relay, missing patches, etc).

80. Bad passwords

81. DoS Vulnerabilities

83. Sniffs the network and looks for predefined attack signatures

84. Alerts you for potential attacks

86. Aide, samhain, tripwire

88. Whitelisting

92. e.g. nagios