Some Background Notes on the Consensus Audit Guidelines (CAG) Post: 302356433

Sponsored Content

Special Forums Cybersecurity IT Security RSS Some Background Notes on the Consensus Audit Guidelines (CAG) Post 302356433 by Linux Bot on Friday 25th of September 2009 01:15:03 PM

09-25-2009

Registered User

Some Background Notes on the Consensus Audit Guidelines (CAG)

Here's some background on the CAG (Consensus Audit Guidelines). The Red Teams have consistently proved that poor configuration and patching practices have made it easy for them to defeat network defenses. This determination lead to the Air Force approaching Microsoft and insisting that new desktop software application come with a standard secure configuration. This was the genesis of what is now known as the Federal Desktop Core Configuration (FDCC.) FDCC uses Red Team knowledge about attacker techniques to protect systems and network vulnerabilities used by attackers to break into systems. This in turn, has led to the Twenty Critical Security Controls (the �CAG� not to be confused with the older abbreviation for Carrier, Air Group used by the Navy.) In the IA context, CAG is the follow-on to the FDCC. It extends the mandate that �offense must teach defense� to identify all 20 critical controls that ensure systems are protected against most known attack vectors and that the systems are configured adequately so that attack software that does get through can be found and eliminated quickly. The demonstrated collateral benefits of these efforts include saving costs in terms of configuration management and patching plus reducing help desk calls.

More...

Linux Bot

View Public Profile for Linux Bot

Find all posts by Linux Bot

4 More Discussions You Might Find Interesting

1. What is on Your Mind?

Guidelines for Posting Here

This area is not for forum specific technical questions. Please post forum specific technical questions in the best forum, not in the lounge. However, if your idea or question is not covered clearly in a forum, please post it here. Discuss whatever is on your mind. Technical topics welcome...

2. Shell Programming and Scripting

Filling positions based on consensus character

I have files with hundreds of sequences with missing characters represented by a dash ("-"), something like this I need to go sequence by sequence and if a dash is found, it should be replaced with the most common character in that particular position. Thus, in my example the dash in the second...

3. AIX

When AIX audit start, How to set the /audit/stream.out file size ?

Dear All When I start the AIX(6100-06)audit subsystem. the log will save in /audit/stream.out (or /audit/trail), but in default when /audit/stream.out to grow up to 150MB. It will replace the original /audit/stream.out (or /audit/trail). Then the /audit/stream.out become empty and...

4. Shell Programming and Scripting

Adding per group and selecting consensus name

Hello gurus, I am having trouble selecting consensus name, if any, for each group in my data. The rules are 1. A group is defined by the first 2 columns. 2. The last column defines the name of the row within a group. If all rows within a group have the same name , we select that name as...

LEARN ABOUT DEBIAN

vitacilina

Vitacilina(3pm) 					User Contributed Perl Documentation					   Vitacilina(3pm)

NAME

       Vitacilina - AXAh, quA~X buena medicina!

DESCRIPTION

       A simple feeds engine exporter that uses YAML to get list of feeds and TT as templating system. Some people would call it an aggregator. It
       was intended to be a reliable Planet (<http://planetplanet.org>) alternative, then some development ideas evolved into rFeed
       (http://github.com/damog/rfeed).  Vitacilina runs on production services on a couple of systems.

SYNOPSIS

	use Vitacilina;

	my $v = Vitacilina->new(
	  config => 'config.yaml',
	  template => 'template.tt',
	  output => 'output.html',
	  limit => '20',
	);

	$v->render;

FILES

   config
       The "config" parameter specifies the path to a YAML file specifying a list of feeds. Use this format:

	http://myserver.com/myfeed:
	  name: Some Cool Feed
	http://feeds.feedburner.com/InfinitePigTheorem:
	  name: InfinitePigTheorem
	...

   template
       A "Template::Toolkit" file which will be taken as the template for output. Format:

	[% FOREACH p IN data %]
	 <a href="[% p.permalink %]">[% p.title %]</a>
	  by <a href="[% p.channelUrl %]">[% p.author %]</a>
	 <br />
	[% END %]

       The "data" is an ordered array with a bunch of hashes with the simple data such as "permalink", "title", "channelUrl", "author", etc.

   output
       File path where the output will be written.

EXAMPLES

       Take a look at the "examples/" directory for fully working example.

SEE ALSO

       Git repository is located at <http://github.com/damog/vitacilina>.  Also take a look at the Stereonaut! blog where similar developments
       from the author are announced and sampled, <http://log.damog.net/>.

AUTHOR

       David Moreno, david@axiombox.com. Alexandr Ciornii contributed with patches.

COPYRIGHT

       Copyright (C) 2009 by David Moreno.

       This library is free software; you can redistribute it and/or modify it under the same terms as Perl itself.

perl v5.10.1							    2009-11-29							   Vitacilina(3pm)