I l @ ve RuBoard |
Given the opportunity, starting from scratch with a system is the best way to ensure the security of the system. A cold install creates a controlled environment which provides the opportunity to select exactly what software is on the system and what is not. A careful evaluation of precisely what is needed on the system should be performed, to determine what software is required to support the server's operation. Install the minimum amount of software necessary to support the services which the system is to provide. The less software on the system, the fewer opportunities for vulnerabilities. It is better to not install software than to remove it after it has been installed. Removing software leaves remnants which have to be cleaned. The cleaning process is rarely completely effective. |
I l @ ve RuBoard |