Servers provide different types of infrastructures to implement different solutions for IT. Security is another issue that must be solved in the IT area. In recent years security became a need. In this tutorial, we will look at how to secure our servers.

Patching

Operating systems use a lot of internal and external tools and services. Especially external ones interface the operating system with the remote clients and attackers over the network. Services are software those runs without stopping and these services may contain security vulnerabilities. These vulnerabilities can be remediated with patches. Patching mechanisms should be run automatically if it can be done.

Inventory

Another aspect of security is the inventory. We should know what we have and related information about them. Without knowing our inventory we can not secure and protect them against attacks.

Firewall

As the systems provide services over network there should be a restriction to these services. This restriction can be done simply with firewalls. There are different types of firewalls from simply port access to the file analyzers. Selects the type of firewall according to your needs.

Accounts & Authentication

Accounts provide authentication and authorization of users. Each user has their own specific account to define itself. Permissions about access, read, write, execute, delete, modify and other operations are set according to account and group privileges. Give more attention while setting up and managing accounts in IT systems.

Security Audit or Review

All days are different in the IT world and systems. We can not track all systems in real-time. But there should be some time frame to review and track IT systems security issues. This will give some information about security-related events in the previous period and show hidden things in a more clear way.

Physical

From my point of view, the first step into securing a system is physical security. Without physical security all other security protections will be weak. Simple accessing IT systems physically will lose the guard. So while configuring security start with physical security to be sure.

Logging

Can we prevent all attacks from outside and inside? No there is no corporate that can answer this question as yes even Microsoft, Google, Facebook. So what is a security mechanism that can be used after or before the attack. We can log system, application, database, service, platform, client, user, etc. events. And get real-time alerts about attacks. another usage is finding information after an attack about how it happens.