Auto-sync: 2026-04-21 17:12
This commit is contained in:
@@ -1,21 +0,0 @@
|
||||
---
|
||||
title: "OS Hardening"
|
||||
type: concept
|
||||
tags: [Security, Linux, AWS]
|
||||
---
|
||||
|
||||
## Definition
|
||||
OS Hardening(操作系统加固)是通过关闭不必要服务、优化内核参数和应用安全补丁来减少系统攻击面的技术过程。
|
||||
|
||||
## Techniques
|
||||
- 关闭不必要的端口和服务
|
||||
- 优化内核参数
|
||||
- 应用安全补丁
|
||||
- 配置防火墙规则
|
||||
- 禁用弱协议和算法
|
||||
- 实施最小权限原则
|
||||
|
||||
## Related Concepts
|
||||
- [[Foundation AMI]] — 应用 OS Hardening 的目标镜像
|
||||
- [[CIS Benchmarks]] — 安全配置基准
|
||||
- [[Standard AMI]] — 企业标准化镜像
|
||||
Reference in New Issue
Block a user