The Cheapskate's Infosecurity Toolbox
- 07 February, 2007 15:14
- Comments 1
As we all know, not everyone is fortunate enough to have a blank cheque for security-related procurement and implementation. Making the best of your allocated budget may at times call for primary or supplementary solutions that are freely available. This strategy cuts procurement time completely out of the loop as well. Here's a list of security tools available on the Web for free that you should add to your toolbox.
BartPE: Preinstalled Environment Troubled by that incessant spyware or virus that just doesn't seem to go away? Need a way to troubleshoot a system without booting the operating system installed on it? BartPE and the right plug-ins will let you do this. www.nu2.nu/pebuilder
Snort: Open Source Intrusion Detection System Arguably the world's most used Intrusion Detection System. Both Windows and Linux binaries are available. www.snort.org
VMWare Server: A virtual environment It finally happened: VMWare is available for free. Patch management, QA, vulnerability remediation testing and other daily activities are now available without a significant capital investment. VMWare also offers images of various environments, configurations and operating systems available for download (they're called "appliances") and ready to use in conjunction with the main product. Just download, point VMWare to the image and test away! www.vmware.com/products/server
DataRescue's IDA Pro Freeware 4.3 disassembler and debugger Although not posted on the DataRescue site any more, the free version of their utility will turn up with a quick Google dig. Try www.programmersheaven.com/
OllyDbg disassembler and debugger Probably the world's most used debugger disassembler. Gives most commercial debuggers a good run for their money. www.ollydbg.de
eEye Digital Security's Binary Diffing Suite A good, free suite of binary diffing tools you can use to see the effect that a released patch may have on your environment. Read the Web site, as there are some platform dependencies. research.eeye.com/html/tools/RT20060801-1.html Cygwin: Linux-like environment for Windows Need to run some scripts or programs that previously ran only under Linux? Do you miss your Linux command line when running Windows? www.cygwin.com
Nagios: An open-source host, service and network monitoring program Not for security only, but Nagios can be used to monitor for events that typically have security implications. This is one that both the CIO and CISO will agree upon. www.nagios.org
iptables and Firewall Builder: Firewall and Management Interface Don't have the deep pockets for a Checkpoint, Cisco or Juniper? iptables comes with most Linux distributions. Not comfortable using a command line to manage it? Firewall Builder is an intuitive way to install and manage the rule set. Get a couple of credit card CDs, create a bootable distribution, and you've got a firewall in your pocket. www.iptables.org and www.fwbuilder.org
Apache SpamAssassin: Fight Spam at the Gateway Not really a secret to most people. With the right configuration this is difficult to beat no matter how much you spend on an antispam solution. spamassassin.apache.org/index.html
Join the CIO Australia group on LinkedIn. The group is open to CIOs, IT Directors, COOs, CTOs and senior IT managers.
- Bookmark this page
- Share this article
- Got more on this story? Email CIO
- Follow CIO on twitter
-
Australia's first 4G smartphone is the HTC Velocity 4G
-
Swedish e-commerce startup's execs linked to NYC sex crime
-
Face Time - Interview with John Brennan and Robert DiStefano
-
How to implement next-generation storage infrastructure for Big Data
-
Pfizer's Future Depends on IT Transformation
-
Cost Effective Security and Compliance with Oracle Database 11g Release 2
Information ranging from trade secrets to financial data to privacy related information has become the target of sophisticated attacks from both sides of the firewall. Built upon 30 years of security experience, the Oracle database provides defense-in-depth security controls that enable organizations to transparently protect data. By leveraging these controls, organizations can safeguard data, ensure regulatory compliance, and achieve business goals such as consolidation, globalization, right sourcing and cloud computing while still maintaining scalability, performance and availability. Read this whitepaper. -
Oracle x86 Rack Servers Optimized for Rapid Deployments and Operational Efficiency
Business-critical and mission-critical workloads demanding applications and databases require stable and secure environments. When these types of workloads are deployed on x86 servers, the need to ensure business continuity, maximum uptime, and consistent processing means that IT managers and business unit managers are looking at enterprise x86 servers in a new way: They realize that the business depends on these servers and that x86 server platforms for the enterprise are no longer expendable, as they might have been when servers were dedicated to a single application or when they were deployed as small Web servers that could be easily taken offline and replaced. -
10 Essential Steps to Web Security
This short guide outlines 10 simple steps to best practice in web security. Follow them all to step up your organisation’s information security and stay ahead of your competitors. But remember that the target never stands still. Focus on the principles behind the steps – policy, vigilance, simplification, automation and transparency – to keep your information security bang up to date.
Get exclusive access to Invitation only events CIO, reports & analysis. 
Comments
Andy Vaughan
Wally Perez
[url=http://zbyh3qpdrs7qk8vw.com/]9539nwf2p50zm00c[/url]
[link=http://6ldyw2na2fhrocsz.com/]60jt1ah87c3qkaat[/link]
<a href=http://6pm0nqccv4i18w5m.com/>6pshvl0l51v92t74</a>
http://jwlvhwq8epr2hj5z.com/
Post new comment