| Topic |
Description |
Chapter 1
Overview/Architecture |
Introduction to the basics of risk analysis and to Apple's security architecture. |
|
Chapter 2
Securing the Local System |
Using the NSA Security Document to refine the security settings in Mac OS X for local systems. |
|
Chapter 3
Data Confidentiality |
Keeping data confidential on local drives through the use of FileVault, file system permissions, and encrypted disk images. |
|
Chapter 4
Mobility Security Issues |
Wireless security for Bluetooth and 802.11, and physical security issues specific to mobile devices.
|
|
|
Chapter 5
Secure Network Connections
|
Comparing commonly used secure client protocols. Creating ssh tunnels, and configure VPN clients. |
|
|
Chapter 6
Secure Authentication
|
Secure local authentication using different shadow hashes, smart cards, and biometrics. Secure network authentication using certificates and Open Directory security. |
|
|
Chapter 7
Secure Network Configuration
|
Configuring Mac OS X Server for NAT, port forwarding, firewall, and VPN server. |
|
|
Chapter 8
Mail Security
|
Security options in Mail.app, as well as configuring certificates and real-time blacklists on Mac OS X server, and Clam/AV for mail-borne virus detection. |
|
|
Chapter 9
Web Security
|
Security options in Safari, as well as Apache web server security issues. Covers web server-specific file system security considerations, PHP vulnerabilities, and logging. |
|
|
Chapter 10
Maintenance, Intrusion Detection, and Auditing
|
Apple certification compliance with various agencies, Common Criteria auditing tools, Apple's security update process. Analyzing Viruses, Macro Viruses, Trojans, and Worms, and exploring potential risks involved on Mac OS X.
|
