In compiling this guide, we have referenced the following authoritative sources, tools, and documentation. They are recommended for those interested in further reading and exploration into the topic of Linux hardening.
- Center for Internet Security (CIS) Benchmarks
- National Institute of Standards and Technology (NIST) Guidelines
- The Linux Foundation
- Open Web Application Security Project (OWASP)
- OpenSCAP
- Linux Kernel Hardening
- SANS Institute Reading Room - Security Practices
- Apache Security - Best Practices
- Nginx - Security Controls
- Docker Security Best Practices
- Puppet Security Best Practices
- Ansible Security Automation
- Metasploit Unleashed
- nmap Network Scanning
- Qualys Suite of Security and Compliance Solutions
This guide is intended to offer practical advice, foundational concepts, and advanced techniques to help you secure your Linux production servers. It is part of our continuous effort to share our knowledge and demonstrate our company's expertise in IT security and Linux hardening.