Summary
This document is a security audit report for GIAC Enterprises Ltd., focusing on two Sun Enterprise 4500 servers over an eight-week period. The audit utilized the TARA host scanning tool to assess system configurations and involved interactions with system and database administrators. The findings revealed various vulnerabilities, including improper server configurations, enabled services that posed security risks, and inadequate measures against buffer overflow attacks. The audit highlighted issues such as unsecured login methods, lack of password policies, and insufficient disaster recovery protocols. Recommendations included implementing security training for system administrators and tightening server security to prepare for potential growth and internet threats. The report also discusses operating system vulnerabilities specific to Solaris and emphasizes the need for stringent security measures due to its popularity among hackers. Overall, the audit identifies critical areas for improvement in the security posture of GIAC Enterprises Ltd.
