Format

Classroom

Duration

4.0 Day(s)

Description

This course provides students with a in-depth understanding of the IBM Security Architecture Model and the various security mechanisms provided by AIX. The core of the course is a model of Security Architecture. We discuss security policy in terms of a model of Security Architecture.
After completing this course students should have sufficient knowledge and skills to implement the first stage of security, which consists of secured stand-alone systems. Advanced courses put more focus on security issues in a networked environment.
The security mechanisms we cover in detail include standard UNIX user administration, file- and directory permissions, and the configuration of the syslog system for application- and system logging and errors. We also discuss AIX extensions in detail: user administration shadow files, extended file- and directory access control, the audit mechanism, and the error daemon.

Audience

The course is primarily intended for AIX system administrators and managers who will be responsible for designing, implementing, and/or auditing AIX systems and applications. However, it should be valuable for anyone implementing security on any UNIX system.

Prerequisites

Students attending this course are expected to be familiar with standard AIX system-administration procedures and commands. This knowledge can be gained by attending:
o AU13/Q1313 AIX 5L Basics
o AU14/Q1314 AIX 5L System Administration I: Implementation
The following courses are optional but recommended:
o AU07/Q1307 AIX 5L Configuring TCP/IP
o AU05/Q1305 AIX 5L TCP/IP Configuration

Objectives

On completion of this course students should be able to:
o Explain common security concepts including accountability, authentication, authorization, confidentiality, privacy, integrity, and availability, as well as how they apply to AIX
o Describe processes for effective security management
o Evaluate a security policy
o Identify security vulnerabilities in a sample AIX system
o Use AIX features to implement a security policy on a sample system including authentication, authorization, preventing denial of service attacks, and auditing