diff --git a/README.md b/README.md index dd5d711..fbd1934 100644 --- a/README.md +++ b/README.md @@ -1,2 +1,73 @@ # awesome-security-hardening -A collection of awesome security hardening guides, tools and other resources + +[![Awesome](https://cdn.rawgit.com/sindresorhus/awesome/d7305f38d29fed78fa85652e3a63e154dd8e8829/media/badge.svg)](https://github.com/sindresorhus/awesome) + +A collection of awesome security hardening guides, tools and other resources. +This is work in progress: please contribute by forking, editing and sending pull requests. + +------ + +# Security Hardening Guides + +## Hardening Guide Collections + +- [CIS Benchmarks](https://learn.cisecurity.org/benchmarks) (registration required) +- [ANSSI Best Practices](https://www.ssi.gouv.fr/en/best-practices/) +- [NSA Security Configuration Guidance](https://apps.nsa.gov/iaarchive/library/ia-guidance/security-configuration/index.cfm?PAGE=1&itemsQty=ALL) +- [DISA Security Technical Implementation Guides (STIGs)](https://iase.disa.mil/stigs/Pages/index.aspx) +- [Australian Cyber Security Center Publications](https://www.cyber.gov.au/publications) +- [FIRST Best Practice Guide Library (BPGL)](https://www.first.org/resources/guides/) + +## GNU/Linux + +- [ANSSI - Configuration recommendations of a GNU/Linux system](https://www.ssi.gouv.fr/en/guide/configuration-recommendations-of-a-gnulinux-system/) +- [nixCraft - 40 Linux Server Hardening Security Tips (2019 edition)](https://www.cyberciti.biz/tips/linux-security.html) + +### Red Hat Enterprise Linux - RHEL + +- [A Guide to Securing Red Hat Enterprise Linux 7](https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html-single/security_guide/index) + +### SUSE + +- [SUSE Linux Enterprise Server 12 SP4 Security Guide](https://www.suse.com/documentation/sles-12/singlehtml/book_security/book_security.html) + +### Ubuntu + + +## Windows + +## macOS + +## Network Devices + +## Virtualization - VMware + +- [VMware Security Hardening Guides](https://www.vmware.com/security/hardening-guides.html) + +## Services + +### SSH + +- [NIST IR 7966 - Security of Interactive and Automated Access Management Using Secure Shell (SSH)](https://nvlpubs.nist.gov/nistpubs/ir/2015/NIST.IR.7966.pdf) +- [ANSSI - (Open)SSH secure use recommendations](https://www.ssi.gouv.fr/en/guide/openssh-secure-use-recommendations/) +- [Linux Audit - OpenSSH security and hardening](https://linux-audit.com/audit-and-harden-your-ssh-configuration/) + +### Web Servers + +### Mail Servers + +### FTP Servers + +### Database Servers + +### LDAP + +# Tools + +## Tools to check security hardening + +- [Lynis](https://cisofy.com/lynis/) + +## Tools to apply security hardening + +# Books