OS security benchmark can be downloaded free

OS security benchmark can be downloaded free

The Center for Internet Security has released the first security benchmark for an operating system. It sets minimum configuration requirements for Sun Microsystems Solaris.

Fred Kerby, information systems security manager at the Naval Surface Warfare Center's Dahlgren Division, called the benchmarks a 'step in the right direction' toward securing software.

'Most [OSes] are wide open' with unnecessary services enabled by default, Kerby said. 'There isn't any security built in, and there isn't any access control.'

Version 1.01 of the Sun Solaris security benchmark gives detailed configuration settings for basic security.

The benchmark and tools are downloadable for free from www.cisecurity.org. Benchmarks for other OSes are under development, center president Clint Kreitner said.

About the Author

William Jackson is a Maryland-based freelance writer.


  • business meeting (Monkey Business Images/Shutterstock.com)

    Civic tech volunteers help states with legacy systems

    As COVID-19 exposed vulnerabilities in state and local government IT systems, the newly formed U.S. Digital Response stepped in to help. Its successes offer insight into existing barriers and the future of the civic tech movement.

  • data analytics (Shutterstock.com)

    More visible data helps drive DOD decision-making

    CDOs in the Defense Department are opening up their data to take advantage of artificial intelligence and machine learning tools that help surface insights and improve decision-making.

Stay Connected