Linux Security (LFS416)


Seminar - Ziel

In this course you will learn how to assess security risks in your enterprise Linux environment, the best techniques and tools to increase security, server hardening, how to deploy and use monitoring and attack detection tools, how to gain visibility into possible vulnerabilities, the art and science of developing your Linux security policy and response strategy, how to configure your systems for compliance with HIPAA, DISA STIG, etc., and more.

Teilnehmer - Zielgruppe

This course is for individuals already experienced in Linux system administration who want to improve their security posture. Before enrolling, you should have a solid understanding of core local system administration and networking concepts, and be experienced with Linux (or more generally UNIX), especially at the command line level.

Kurs - Voraussetzungen

To make the most of of this course, you should:

  • Have a solid understanding of core local system administration and networking concepts equivalent to that obtained from LFS301 Linux System Administration and LFS311 Linux Networking and Administration.
  • Be experienced with Linux (or more generally UNIX), especially at the command line level.


  • 4 Tage
  • 09:00 Uhr bis 17:00 Uhr


  • nach Absprache

Seminar-Inhalt / Agenda


  • Linux Foundation
  • Linux Foundation Training
  • Linux Foundation Certifications
  • Linux Foundation Digital Badges
  • Laboratory Exercises, Solutions and Resources
  • E-Learning Course: LFS216
  • Distribution Details
  • Labs
  • Security Basics

What is Security?

  • Assessment
  • Prevention
  • Detection
  • Reaction
  • Labs
  • Threats and Risk Assessment

Classes of Attackers

  • Types of Attacks
  • Trade Offs
  • Labs
  • Physical Access

Physical Security

  • Hardware Security
  • Understanding the Linux Boot Process
  • Labs
  • Logging

Logging Overview

  • Syslog Services
  • journald Services
  • The Linux Kernel Audit Daemon
  • Linux Firewall Logging
  • Log Reports
  • Labs
  • Auditing and Detection

Auditing Basics

  • Understanding an Attack Progression
  • Detecting an Attack
  • Intrusion Detection Systems
  • Labs
  • Application Security

Bugs and Tools

  • Tracking and Documenting Changes
  • Resource Access Control
  • Mitigation Techniques
  • Policy Based Access Control Frameworks
  • Real World Example
  • Labs
  • Kernel Vulnerabilities

Kernel and User Spaces

  • Bugs
  • Mitigating Kernel Vulnerabilities
  • Vulnerabilities Examples
  • Labs
  • Authentication

Encryption and Authentication

  • Passwords and PAM
  • Hardware Tokens
  • Biometric Authentication
  • Network and Centralized Authentication
  • Labs
  • Local System Security

Standard UNIX Permissions

  • Administrator Account
  • Advanced UNIX Permissions
  • Filesystem Integrity
  • Filesystem Quotas
  • Labs
  • Network Security

TCP/IP Protocols Review

  • Remote Trust Vectors
  • Remote Exploits
  • Labs
  • Network Services Security

Network Tools

  • Databases
  • Web Server
  • File Servers
  • Labs
  • Denial of Service

Network Basics

  • DoS Methods
  • Mitigation Techniques
  • Labs
  • Remote Access

Unencrypted Protocols

  • Accessing Windows Systems
  • SSH
  • Labs
  • Firewalling and Packet Filtering

Firewalling Basics

  • iptables
  • Netfilter Implementation
  • Netfilter rule management
  • Mitigate Brute Force Login Attempts
  • nft Concepts
  • Labs
  • Response and Mitigation


  • During an Incident
  • Handling Incident Aftermath
  • Labs
  • Compliance testing with OSCAP

Compliance Testing

  • SCAP Introduction
  • OpenSCAP
  • SCAP Workbench
  • Command Line Scan
  • Labs

Weitere Schulungen zu Thema Linux Foundation

Kubernetes for App Developers (LFD459)

- u.a. in Nürnberg, Berlin, Stuttgart, München, Köln

This course will teach you how to containerize, host, deploy, and configure an application in a multi-node cluster. It also serves as preparation for the Certified Kubernetes Application Developer (CKAD) exam. Starting with a simple Python script, this course will show you how ...

ONAP Essentials (LFS463)

- u.a. in Nürnberg, Berlin, Stuttgart, München, Köln

This course aims to provide you the conceptual and hands-on skills around ONAP, focusing -on: -The basics of Network Function Virtualization (NFV) -An introduction to The Linux Foundation ONAP project -Overview of the ONAP project’s architecture, subprojects and demos In ...

Developing Applications For Linux (LFD401)

- u.a. in Köln, Leipzig, Düsseldorf, Koblenz, Mannheim

Learn how to develop applications for the Linux environment. In this instructor-led course, you’ll get hands-on experience with the necessary tools and methods for Linux application development and learn about the features and techniques that are unique to Linux. In this ...

Fundamentals of Linux (LFS300)

- u.a. in Leipzig, Nürnberg, Paderborn, Wien, Virtual Classroom

In this course you will learn about the history of Linux, how to install Linux, how to use the Graphical User Interface, how to control Linux using the command line, basic Linux security, and much more.