Harden Yourself

Assignment Type: Group work

Motivation Make your system more secure.

Introduction

Here are a bunch of resources. It is up to your grouop to decide which ones make sense to use.

For the first category of tools, consider how you can make them part of your CI/CD pipeline.

snyk has a a database full of exploits. They've created multiple tools to help you find and fix vulnerabilities in your code.

Install snyk (brew install snyk-cli / choco install snyk / npm i -g snyk). You will then have to autheticate with:

$ snyk auth

$ snyk test

You can also run snyk on a Docker container but I recommend Docker Scout for that.

Docker also provides a vulnerability scanner:

You can access it through Docker Desktop or through the command line.

Trivy is a general purpose security scanner:

You can perform a website security test by entering your website URL:

A popular website security scanner but it requires an account:

Lynis is a security auditing tool for Unix and Linux based systems. It performs an in-depth security scan.

It will analyze your server from within and treat it as a white box as opposed to a black box.

$ apt install -y lynis
$ sudo lynis audit system