Hardening an Ironwood production Linux server at the bench, from a default build to a hardened baseline: ss -tulpn shows the attack surface shrinking from sshd open to anyone plus rpcbind and cupsd, down to SSH reachable only from the 10.10.0.0/24 admin network; the terminal applies the changes — no root login and no password authentication, CUPS disabled, a default-deny firewall, SYN cookies on and an AIDE integrity check — and the server on the bench shows all eight controls locked: accounts, SSH, services, firewall, filesystem, kernel, logging and updates.

CY-MID-059Mid Level · Endpoint Security

Linux Server Hardening — The Hardening Bench

A hands-on, workshop-style mid-level course that hardens a Linux server one control at a time. Work the hardening surface board — Accounts, SSH, Services, Firewall, Filesystem, Kernel, Logging, Updates — applying real commands and configs, verifying every change on the running system, and building a reproducible, fleet-ready baseline. Four hands-on activities in every lesson.

16 hours8 chapters40 lessons265 activities8 labs

What you'll learn

Harden a Linux server as attack-surface reduction, applying and verifying changes safely.
Lock down accounts and SSH — least-privilege sudo, key-only auth, no self-lockout.
Reduce the service surface, build a default-deny firewall, and harden the filesystem and kernel.
Instrument logging and auditing and sustain a hardened baseline across a fleet.

Price:৳8,000