Security tests

From Oxxus Wiki

For most-secure VPS servers take a look at our VPS hosting offer.

Few solutions and ways to test your security are described below.

Security test: Rootkit scanning

When your server becomes hacked, usually hackers install rootlet on the server that enables them to login to your server and use it, while you can do nothing to detect them. They patch certain binaries like netstat, ps, w, who, etc. so they would become invisible to you when you are regularly checking your system. You can use chkrootkit to scan and detect most of the known rootkit software available online.

Security test: log analyzing

Regular linux maintenance should include log analyzing every week. You should check /var/log/secure, /var/log/messages and do dmesg to see if there is anything suspicious. If you don't know what a log entry means, feel free to Google it. You will most certainly find the similar log appearances and other users experience.

Security test: Virus scanning

Although there are not many Linux viruses, files available over the web are vulnerable to iFrame, javascripts and other injected into your html documents. They most likely get infected by local Windows viruses that locate your FTP credentials and upload infected files to your website. You can scan regularly for these using clamd antivirus. Use yum -y install clamav and scan your system for potential viruses with

clamscan -ri /var/www/html 
or 
clamscan -ri /home