Where would I go to learn to set up a really, really secure system that DOES expose external services (out of a standard Windows or Linux OS). Note that I am not looking for a favorite choice between Linux and Windows, as the choice is not likely to be mine to make. However the level of security needs to be military grade.

  • 3
    Military grade == NOT exposing services to the internet. They use secure communication lines. ;-) – Chris Nava Dec 15 '10 at 21:39
  • 1
    The choice of OS should be almost irrelevant because the real protection needs to be applied well before the server anyway. – John Gardeniers Dec 15 '10 at 21:48
  • 2
    'Military Grade' is effectively a worthless term here. – Andrew Barber Dec 15 '10 at 21:58
  • 1
    Networks that have secret clearance data on it are not connected to the Internet in any way that can access the Internet or accessed from the Internet. They may have VPN tunnels between offices connecting the secured networks together but at no time would that sort of network be allowed to route any data to or from any untrusted network. – 3dinfluence Dec 15 '10 at 23:28
  • 2
    "Military Grade" might not be a worthless term, but it's certainly ambiguous. Military grade in the ability to withstand a nuclear event, the ability to withstand the hacking attempts of rogue governments, whose military? Etc., etc. – joeqwerty Dec 16 '10 at 0:31



OWASP is a good place to start. However, read my comment above. Also start with a secured OS and open things up as needed.


One way to approach the security/services open to internet combination would be through some VM technology like CentOS/Xen (or MS HyperV or VMWare or KVM or plane old VirtualBox). Each VM can have a unique IP which could be put in your router's DMZ. You can have have VM backups and mirrors for redundancies. If you went the Xen route I suppose Xen Wiki is where you would want to start.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.