Security Configuration Guidance
NSA develops and distributes configuration guidance for a wide variety of software, both open source and proprietary. We strive to provide NSA customers and the software development community the best possible security options for the most widely used products. NSA does not favor or promote any specific software product or business model. Rather, we promote enhanced security.
-
From section:
Applications
Deploying and Securing Google Chrome in a Windows Enterprise (version 1)
This paper contains deployment guidance, recommended policies, and technical details for United States government and Department of Defense administrators who want to use the enterprise version of the Google Chrome web browser in their Windows Active Directory domain. Chrome 20.0.1132.47,
22 October 2012 37 page(s) pdf
-
From section:
Operating Systems
SCAP Content for Apple iOS 5 Security Configuration Recommendations
These are zip files that go with the Apple iOS configuration guide
01 May 2012 zip
-
From section:
Operating Systems
Security Configuration Recommendations for Apple iOS 5 Devices (version 0)
This document provides security-related usage and configuration recommendations for Apple iOS devices such as the iPhone, iPad, and iPod touch.
28 March 2012 37 page(s) pdf
-
From section:
Applications
Redaction of PDF Files Using Adobe Acrobat Professional X
This document describes a procedure using Adobe Acrobat Professional X to redact information from PDF documents. The original source of the document can be any application, but the process described applies to documents that are already in PDF.
22 November 2011 13 page(s) pdf
-
From section:
Operating Systems
Guide to the Secure Configuration of Red Hat Enterprise Linux 5 (version 4.2)
The purpose of this guide is to provide security configuration recommendations for the Red Hat Enterprise Linux (RHEL) 5 operating system. The guidance provided here should be applicable to all variants (Desktop, Server, Advanced Platform) of the product. Recommended settings for the basic operating system are provided, as well as for many commonly-used services that the system can host in...
26 August 2011 200 page(s) pdf
-
From section:
Applications
Guidelines for Implementation of REST
This paper tries to help identify and explain the security risks (positive and negative) with REST, to facilitate development of more robust REST solutions.
25 March 2011 19 page(s) pdf
-
From section:
Applications
BIND 9 DNS Security
Vulnerability Technical Reports such as BIND 9 Security provide our customers with value-added information regarding a plethora of technologies. These reports identify vulnerabilities and provide recommendations to improve or eliminate the identified vulnerabilities. These reports also prioritize vulnerabilities and identify future initiatives in that particular technology arena. BIND is an open-source Domain Name Server (DNS) software package from the Internet...
14 February 2011 15 page(s) pdf
-
From section:
Operating Systems
Security Highlights of Windows 7
This guide highlights many of the new security features in Windows 7, just one of the many commercial operating systems available.
06 October 2010 2 page(s) pdf
-
From section:
Industrial Control Systems
A Framework for Assessing and Improving the Security Posture of Industrial Control Systems (ICS) (version 1.1)
This publication is the first in a series intended to help Industrial Control System (ICS) owners and operators in need of improving the security posture of their systems. This document will focus the reader on aspects of network security and give them a framework for assessing their current operational risk. It will then offer the reader a quantifiable approach to...
20 August 2010 18 page(s) pdf
-
From section:
Operating Systems
Application Whitelisting using Software Restriction Policies (version 1.1)
Software Restriction Policies (SRP) enables administrators to control which applications are allowed to run on Microsoft Windows. SRP is a feature of Windows XP and later operating systems. It can be configured as a local computer policy or as domain policy using Group Policy with Windows Server 2003 domains and later. Using this guide, administrators can configure SRP to prevent...
01 August 2010 19 page(s) pdf
Top