Regresar

Methodological proposal for the optimization of the installation times of hardenized Linux operating systems through the Spacewalk solution in critical infrastructures

Abstract:

Critical infrastructures are physical or virtual assets that provide a variety of continuous services through various networks like LAN, MAN, WAN, and cloud services. Any interruption in critical infrastructures would have a great impact on the services they provide, preventing the continuity of various business models. The purpose of this methodology is to increase the levels of hardening in critical infrastructures that use the Linux operating system, allowing the continuity of the services they provide and reducing the risk of network attack vectors, adjacent and local. The hardening level will increase during the installation of the Linux operating system by means of a kickstart file with the hardening settings and the Spacewalk server that hosts this file. The proposed methodology consists of four phases. The first phase will be carried out in the installation and configuration of the Spacewalk server. The second phase is to establish the hardening configurations based on the CIS Benchmark in the kickstart file, which will be hosted on the Spacewalk server. The third phase is the deployment of the kickstart file when performing a hardenized installation. In the last phase, the percentage of hardening and the optimization achieved in the installation time will be verified.