Thursday, June 16, 2016

Dev-Sec.io Automated Hardening Framework

Automated configuration management tools like Ansible, Chef and Puppet are changing the way that organizations provision and manage their IT infrastructure. These tools allow engineers to programmatically define how systems are set up, and automatically install and configure software packages. System provisioning and configuration becomes testable, auditable, efficient, scalable and consistent, from tens to hundreds or thousands of hosts.

These tools also change the way that system hardening is done. Instead of following a checklist or a guidebook like one of the CIS Benchmarks, and manually applying or scripting changes, you can automatically enforce hardening policies or audit system configurations against recognized best practices, using pre-defined hardening rules programmed into code.

An excellent resource for automated hardening is a set of open source templates originally developed at Deutsche Telekom, under the project name "Hardening.io". The authors have recently had to rename this hardening framework to Dev-Sec.io

It includes Chef recipes and Puppet manifests for hardening base Linux, as well as for SSH, MySQL and PostgreSQL, Apache and Nginx. Ansible support at this time is limited to playbooks for base Linux and SSH. Dev-Sec.io works on Ubuntu, Debian, RHEL, CenOS and Oracle Linux distros.

For container security, the project team have just added an InSpec profile for Chef Compliance against the CIS Docker 1.11.0 benchmark.

Dev-Sec.io is comprehensive and at the same time accessible. And it’s open, actively maintained, and free. You can review the rules, adopt them wholesale, or cherry pick or customize them if needed. It’s definitely worth your time to check it out on GitHub: https://github.com/dev-sec

44 comments:

Andrew303john said...

Finance Assignment Help

We at Fullassignment.com bring to you the most significant Finance assignment writing service at the best cost. With long stretches of understanding we are prepared to give assignment help over the globe.You will be guided here with a portion of the information of Finance assignment which could assist you in deciding writing a Finance assignment. Nonetheless we uneuqivocally prescribe you to benefit Managerial accounting assignment help from our specialist to find out about marketing and its scope.

https://fullassignment.com/

Unknown said...

If you're looking to lose pounds then you absolutely have to start following this brand new custom keto meal plan.

To create this keto diet service, certified nutritionists, fitness trainers, and cooks have united to develop keto meal plans that are effective, suitable, price-efficient, and satisfying.

From their launch in 2019, 1000's of clients have already remodeled their figure and health with the benefits a proper keto meal plan can offer.

Speaking of benefits; clicking this link, you'll discover 8 scientifically-confirmed ones offered by the keto meal plan.

William Smith said...

Thank you for this wonderful information share and excellent information providing by your article. Are you looking for assignment help services in Singapore? Do you require to finish your assignment? Singapore assignment help is a well-liked assignment Acquire immediate Assignment Help before completion of time at a fair cost. Kindly visit the LiveWebTutors website…

Alisah Wilson said...

Are you finding for homework assignment help? Try our topmost homework experts who can help you get A+ grade marks in your homework. Hire us now.

BestTrainingMumbai said...

You have made neural relationship in my cerebrum not used as normally as could be normal the situation being what it is. Thankful to you for getting my neurons bobbing.
SAP training in Kolkata
Best SAP training in Kolkata
SAP training institute in Kolkata

Anirban Ghosh said...

You have made neural relationship in my cerebrum not utilized as ordinarily as could be typical the circumstance being what it is. Appreciative to you for getting my neurons weaving.
SAP training in Mumbai
Best SAP training in Mumbai
SAP training institute Mumbai

CloudLearn ERP said...

There are many aspects of this article on which I concur with you. You have made neural relationship in my cerebrum not used as commonly as could be average the situation being what it is.
SAP training in Mumbai
Data Science training in Mumbai
Best data science training in Mumbai

official Viu said...

watch online movies

free movies online

hd online movies

hindi dubbed movies

online hindi movies

online movies

kissasian

dramacool

kissanime

dentistcurie said...

Expected to form you a next to no word to thank you once more with respect to the decent recommendations you've contributed here.
dental clinics in chennai

rajani kota said...

Hi Very nice blog thank you for sharing this blog.
DevOps Training
DevOps Online Training

Balajee Nanduri said...

Nice Post. Keep updating more and more DevOps Online Training

Max Willor said...

That's exactly what I call a very successful message. It's so broad I don't need to hop anywhere else for the info. Great work, keep posting! At My Assignment Help Au, We Offer Pocket-Friendly Services And Write Tailored Assignments. Students Trust Our Assignment Help in Australia. To Get Authentic Assignments Within Deadlines, Hire Us Today!

Anu said...


i just go through your article it’s very interesting time just pass away by reading your article looking for more updates. Thank you for sharing DevOps Training in Chennai | DevOps Training in anna nagar | DevOps Training in omr | DevOps Training in porur | DevOps Training in tambaram | DevOps Training in velachery

augustwalker said...

The most effective method to Install Canon Printer. Group makes a wide assortment of printers, each with its own specific highlights and advantages, for example, the capacity to filter records or send faxes. In spite of the contrasts between the different printer models, every Canon printer utilizes a similar establishment technique, which you should perform

Sumit Kumar said...

Quickbooks Desktop stop responding

Quickbooks not responding error

Download and Install Quickbooks

Install Quickbooks Desktop

Quickbooks not responding

Newton said...

Get high quality backlinks through Adult Blogging for your Adult Business.
Adult Guest Posting
https://adultguestposting.com/why-the-men-should-go-for-the-best-london-escorts-services/
https://adultguestposting.com/some-essential-features-of-the-female-strippers-services/
https://www.warriorforum.com/members/adultguestposting.html
https://www.openlearning.com/u/adultguestposting-qc4131/
http://seqanswers.com/forums/member.php?u=122899
http://www.mappery.com/user.php?name=adultguestposting
https://www.heatbud.com/barnaby-estrada
https://www.apsense.com/article/why-the-men-should-go-for-the-best-london-escorts-services.html
https://mamby.com/post/some-essential-features-of-the-female-strippers-services

Anu said...

This blog is so nice to me. I will continue to come here again and again. Visit my link as well. Good luck DevOps Training in Bangalore | Certification | Online Course Training | DevOps Training in Hyderabad | Certification | Online Course Training | DevOps Training in Coimbatore | Certification | Online Course Training | DevOps Training in Online | Certification | Online Course Training

keerthana said...

I will continue to come here again and again post.
PHP Training in Chennai | Certification | Online Training Course | Machine Learning Training in Chennai | Certification | Online Training Course | iOT Training in Chennai | Certification | Online Training Course | Blockchain Training in Chennai | Certification | Online Training Course | Open Stack Training in Chennai |
Certification | Online Training Course

Ritu Sharma said...

Great collection and thanks for sharing this info with us. Waiting for more like this.
DevOps certification in Chennai
DevOps Training in Chennai
DevOps course in Chennai
DevOps certification
DevOps Training
Best DevOps Training in Chennai
DevOps Training institute in Chennai
DevOps course
DevOps Training in Velachery

Rose taylor said...

best bathroom faucet fo hard water review guide. Choose a right faucet for your bathroom.

dexterous said...

Thanks For Sharing Such Great Information, It's Really Nice And Informative...

GMAT online preparation
GMAT training in hyderabad
CAT Coaching in hyderabad

MS Dynamics said...

Thanks for such a great article here.
DevOps Training
DevOps Online Training
DevOps Online Training in Hyderabad
DevOps Online Training institute
DevOps Training Online
DevOps Online Course

Muhammad Azwar said...

Nice Post Also Check This Out
About Islam
Dynamic Movies

dhinesh said...

An overwhelming web journal I visit this blog, it's unfathomably amazing. Unusually, in this present blog's substance made inspiration driving truth and reasonable. The substance of data is enlightening.


Full Stack Course Chennai
Full Stack Training in Bangalore

Full Stack Course in Bangalore

Full Stack Training in Hyderabad

Full Stack Course in Hyderabad

Full Stack Training

Full Stack Course

Full Stack Online Training

Full Stack Online Course



rocky said...

Your good knowledge and kindness in playing with all the pieces were very useful. I don’t know what I would have done if I had not encountered such a step like this.

python training in bangalore

python training in hyderabad

python online training

python training

python flask training

python flask online training

python training in coimbatore


pavi said...

Am really impressed about this blog because this blog is very easy to learn and understand clearly.This blog is very useful for the college students and researchers to take a good notes in good manner,I gained many unknown information.



Data Science Training In Chennai

Data Science Online Training In Chennai

Data Science Training In Bangalore

Data Science Training In Hyderabad

Data Science Training In Coimbatore

Data Science Training

Data Science Online Training

Ramya said...

Thanks for provide great informatics and looking beautiful blog, really nice required information & the things i never imagined and i would request, wright more blog and blog post like that for us. Thanks you
DevOps Training in Chennai

DevOps Online Training in Chennai

DevOps Training in Bangalore

DevOps Training in Hyderabad

DevOps Training in Coimbatore

DevOps Training

DevOps Online Training

Sages Marketing said...

Very interesting blog. Many blogs I see these days do not really provide anything that attracts others, but believe me the way you interact is literally awesome.You can also check my articles as well.

Security Guard License
Ontario Security License
Security License Ontario
Security License

Thank you..

sharath said...

Really nice topics you had discussed above. I am much impressed. Thank you for providing this nice information here.
Java Training in Chennai

Java Training in Bangalore

Java Training in Hyderabad

Java Training
Java Training in Coimbatore

Angelina said...

I got some insights about Turing machine simulator in Scala. However, large enterprises can take advantage of the benefits of outsourcing to boost product development times while maintaining excellent product quality.

ajith said...

thank you for the information

angular js course in chennai

angular course in chennai

angular js online course in chennai

angular js course in bangalore

angular js course in hyderabad

angular js course in coimbatore

angular js course

angular js online course

Jack Parker said...

Assignment writing help
Dissertation help
Assignment assistance

Mercy Smith said...

Nice, you can visit my website to know complete information about United Airlines Ticket Booking

Mercy Smith said...

Thanks for sharing this information, you can easily book your flight tickets at United Airlines Cheap Flights

Mercy Smith said...

Nice blog..
Are you want to book your flight tickets at United Airlines Booking, but worry about how to book then here you will get complete information, our customer service 24*7 available, if you face any issues then contact with our technical experts.

Anonymous said...

Thanks for sharing this information you can easily book your flight tickets at united airlines reservations official site, we provide 24*7 customer service.

Packers And Movers Chennai said...

Packers and Movers Chennai Give Safe and Reliable ***Household Shifting Services in Chennai with Reasonable ###Packers and Movers Price Quotation. We Provide Household Shifting, Office Relocation, ✔ ✔ ✔ Local and Domestic Transportation Services, Affordable and Reliable Shifting Service Charges @ Packers And Movers Chennai

Assignment Achievers said...

your work very well elaborated, Assignment Help can help you with good quality assignments and projects
Online Assignment Help
Programming Assignment Help
Database Assignment Help
MYOB Assignment Help
Perdisco Assignment Help

Radhya said...

Great blog thanks for share with us.
Best website development company in Lucknow.

William Smith said...

The blog written is extremely impressive, with a great topic. However, a bit more research could have strengthened it even further. You can explore the services as offered by livewebtutors.com, a premium academic writing services platform offering the best of assignment help teamed with knowledge and experience

kennethparker said...

Find instant solutions for thousands of college homework questions like: locating production facilities within regional markets is popular because ________. only on ScholarOn, the best academic assistance available online.

glendadavis said...

If you are looking for test banks online, the best place for Testbank Downloads would be TestBanksOnline. Do not wait to buy Test Bank For Visual C How To Program 6th Edition online anymore. Get Test Banks Download and improve your grades.

Miles Hrein said...

I don't see your facebook account, I want to follow you there. Why don't you share it? If you have few followers you can buy fb followers from this site https://soclikes.com/. I buy sometimes from this site

DEVID WARNER said...

123.hp.com | Printer configuration, setup and installation of HP printer. Get printer support for HP printer scan, print and copy from 123.hp.com.

Site Meter