I'm a newbie in this world and I do not have a lot of knowledge about how security works on Linux systems. I recently created a droplet on DigitalOcean with Ubuntu 13 and I've been setting it up by following some of the tutorials they have.
But I can see that there are a lot of security tools that do mostly the same thing, so I am unsure what I should install and configure. So far this is what I installed:
Is this too much or maybe overreacting? And are any of the above unnecessary? Does anyone suggest some other tools besides the above that I should install?
EDIT: I ended up installing/setting up the following:
- 2 Factor Authentication (Authy)
- UFW (Firewall)
- FSTAB (Secure Shared Memory) [Step 2]
- Disallow Root Access [Step 3]
- Protect SU [Step 4]
- SYSCTL Settings (Harden Network) [Step 5]
- IP Spoofing [Step 7]
- DenyHosts (Prevent Brute Force Attacks)
- Fail2Ban (Protect SSH)
- PSAD (Network Intrusion Detection)
- Tripwire (Server Intrusion Detection)
- RKHunter (Rootkit Guard)
- Apparmor (SELinux) [Step 17]
I hope that now I got a basic security setup running. Any input on what I am missing or what I should not use is appreciated.