The Center for Internet Security (CIS) has published the SolarisTM 10 Operating System (Solaris OS) Security Benchmark. CIS and Sun have been working together to establish this benchmark for the past two years and just recently published its contents that describe how to implement CIS Level-I security on the Solaris 10 OS.

This benchmark is a compilation of security configuration actions and settings that "harden" the Solaris OS, according to the CIS Web site. This announcement is for a CIS Level-I Benchmark, which is considered the prudent level of minimum due care for operating system security.

Level-I Benchmark settings are designed for easy comprehension by system administrators that have had at least a minimal level of security knowledge and experience.

CIS expects the Solaris 10 OS scoring tool, which is still under development, to be released in July. The CIS Scoring Tool for the Solaris OS provides a quick and easy way to evaluate systems and compare their level of security against the CIS minimum due care security benchmark. With Scoring Tool reports, system administrators are provided guidelines to harden both new installations and active production systems. The tool also is effective for monitoring systems to assure that security settings continuously conform with the benchmark.

CIS helps organizations around the world effectively manage the risks related to information security. This not-for-profit group provides methods and tools to improve, measure, monitor and compare the security status of Internet-connected systems, appliances and business partners.

CIS is not tied to any proprietary product or service. It manages a consensus process whereby members identify security threats of greatest concern, then participate in development of practical methods to reduce the threats. This consensus process has proven viable in creating Internet security benchmarks set for widespread adoption.

The Solaris 9 OS Security Benchmark and Scoring Tool also are available for download on the CIS Web site.

To download the CIS Solaris 10 Security Benchmark, visit:

http://www.cisecurity.org/bench_solaris.html [...read more...]

		fullsource
Print Email Current Profile Archive Blog Generate newsletter