<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Web Publisher Security &#187; Linux</title>
	<atom:link href="http://www.publishersecurity.com/category/linux/feed" rel="self" type="application/rss+xml" />
	<link>http://www.publishersecurity.com</link>
	<description>Information security blog to help web publishers stay protected</description>
	<lastBuildDate>Fri, 22 May 2009 10:51:42 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.4</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>SSH Attacks Rising</title>
		<link>http://www.publishersecurity.com/ssh-attacks-rising</link>
		<comments>http://www.publishersecurity.com/ssh-attacks-rising#comments</comments>
		<pubDate>Sun, 18 May 2008 12:02:34 +0000</pubDate>
		<dc:creator>devnull</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[brute-force]]></category>
		<category><![CDATA[ssh]]></category>

		<guid isPermaLink="false">http://www.publishersecurity.com/?p=18</guid>
		<description><![CDATA[Recently i wrote about securing SSH access with certificate login. 
A report from SANS warns administrators from a rising number of brute-force attacks on SSH daemons. 
http://isc.sans.org/diary.html?storyid=4408
Taking care of these things in advance will save you some headaches.
]]></description>
			<content:encoded><![CDATA[<p>Recently i wrote about <a href="http://www.publishersecurity.com/secure-login-for-your-linux-server">securing SSH access with certificate login</a>. </p>
<p>A report from SANS warns administrators from a rising number of brute-force attacks on SSH daemons. </p>
<p>http://isc.sans.org/diary.html?storyid=4408</p>
<p>Taking care of these things in advance will save you some headaches.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.publishersecurity.com/ssh-attacks-rising/feed</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Secure login for your Linux server</title>
		<link>http://www.publishersecurity.com/secure-login-for-your-linux-server</link>
		<comments>http://www.publishersecurity.com/secure-login-for-your-linux-server#comments</comments>
		<pubDate>Wed, 19 Mar 2008 13:36:50 +0000</pubDate>
		<dc:creator>devnull</dc:creator>
				<category><![CDATA[Linux]]></category>

		<guid isPermaLink="false">http://www.publishersecurity.com/secure-login-for-your-linux-server</guid>
		<description><![CDATA[The SSH protocol is a secure way to manage your linux / unix server.
It offers an encrypted method of remote command line connection.
This is probably the protocol you already use for server administration.
As with most protocols, username and password is used for authentication. While this is a common way to authenticate, it is still prone [...]]]></description>
			<content:encoded><![CDATA[<p>The SSH protocol is a secure way to manage your linux / unix server.</p>
<p>It offers an encrypted method of remote command line connection.</p>
<p>This is probably the protocol you already use for server administration.</p>
<p>As with most protocols, username and password is used for authentication. While this is a common way to authenticate, it is still prone to brute force attacks.</p>
<p>A good way to mitigate the possibility of brute force attacks against your ssh daemon,  is disabling password login and enabling certificate authentication.</p>
<p>The idea is simple, in order to login to the server, you will have to present a file containing a unique certificate. You may store this file on a dedicated hardware token, the hard drive or a simple flash disk.</p>
<p>Once this certificate validates, you will gain access.</p>
<p>A good article on setting this up is available on Security Focus.</p>
<p><a href="http://www.securityfocus.com/infocus/1810">http://www.securityfocus.com/infocus/1810</a></p>
<p><script type="text/javascript"><!-- google_ad_client = "pub-4528099294087239"; google_ad_width = 468; google_ad_height = 60; google_ad_format = "468x60_as"; google_ad_type = "text_image"; //2007-07-04: publishersecurity google_ad_channel = "3703482594"; google_ui_features = "rc:6"; //--> </script> <script src="http://pagead2.googlesyndication.com/pagead/show_ads.js" type="text/javascript"> </script></p>
]]></content:encoded>
			<wfw:commentRss>http://www.publishersecurity.com/secure-login-for-your-linux-server/feed</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
	</channel>
</rss>
