Where would I go to learn to set up a really, really secure system that DOES expose external services (out of a standard Windows or Linux OS). Note that I am not looking for a favorite choice between Linux and Windows, as the choice is not likely to be mine to make. However the level of security needs to be military grade.
8
-
3Military grade == NOT exposing services to the internet. They use secure communication lines. ;-)– Chris NavaDec 15, 2010 at 21:39
-
1The choice of OS should be almost irrelevant because the real protection needs to be applied well before the server anyway.– John GardeniersDec 15, 2010 at 21:48
-
2'Military Grade' is effectively a worthless term here.– Andrew BarberDec 15, 2010 at 21:58
-
1Networks that have secret clearance data on it are not connected to the Internet in any way that can access the Internet or accessed from the Internet. They may have VPN tunnels between offices connecting the secured networks together but at no time would that sort of network be allowed to route any data to or from any untrusted network.– 3dinfluenceDec 15, 2010 at 23:28
-
2"Military Grade" might not be a worthless term, but it's certainly ambiguous. Military grade in the ability to withstand a nuclear event, the ability to withstand the hacking attempts of rogue governments, whose military? Etc., etc.– joeqwertyDec 16, 2010 at 0:31
|
Show 3 more comments
3 Answers
OWASP is a good place to start. However, read my comment above. Also start with a secured OS and open things up as needed.
One way to approach the security/services open to internet combination would be through some VM technology like CentOS/Xen (or MS HyperV or VMWare or KVM or plane old VirtualBox). Each VM can have a unique IP which could be put in your router's DMZ. You can have have VM backups and mirrors for redundancies. If you went the Xen route I suppose Xen Wiki is where you would want to start.
