2021 总结：5 个开源安全资源
安全

> 
> 你现在需要读的 2021 安全总结文章。
> 
> 
> 


![](/data/attachment/album/202112/31/112208zcc0ccatn8mkvddk.jpg "A secure lock.")


2021 年我们最常见的讨论之一是你自己数据的安全和隐私。显然，你的数据是你的，密码是安全的关键。今年的安全类的作者们提供了有用的知识和开源工具来保持你的数据和硬件安全。


以下是我对今年安全之旅选出的前五篇文章。


### 《6 个开源工具和初学者保护 Linux 服务器的技巧》


[Sahana Sreeram](https://opensource.com/users/sahanasreeram01gmailcom) 提供了从更新到恶意软件扫描的 [六个基本的服务器安全小知识](https://opensource.com/article/21/4/securing-linux-servers)。这篇文章为你在家里或工作中的 Linux 服务器提供了一个起点。要特别注意密码强度部分和为你的服务器创建降低风险的密码策略要求的工具，因为这是你所使用的任何操作系统上最关键的做法。这篇文章是一篇实用指南，指导你在 Linux 服务器的日常工作中进行安全工作。正如 Sahana 所指出的，安全领域无疑正在扩大，这篇文章给了每个人着手预防的机会。


### 《用开源软件保护你的文件的 5 种方法》


接下来的 [这篇文章](https://opensource.com/article/21/4/secure-documents-open-source) 对于像我这样写了大量的文档（从文章到个人研究笔记都有）的人来说是非常有用的。作者 [Ksenia Fedoruk](https://opensource.com/users/ksenia-fedoruk) 首先列出了保存文档的开源云存储服务。接下来，她介绍了加密的重要性以及在我们的文档中使用加密的方法。她还清楚地介绍了文件的数字签名和水印以及使用哪些开源工具。最后，文章涵盖了对我们制作和使用的文档进行密码保护的情况。结尾处的提醒遵循了今年安全领域的一个共同主题：你的数据是你的。


### 《4 个清除你的数据的 Linux 工具》


在 [这篇文章](https://opensource.com/article/21/10/linux-tools-erase-data) 中，[Don Watkins](https://opensource.com/users/don-watkins) 涵盖了硬件的用途和维护。它以一系列擦除硬盘的工具作为引子，这样你的数据就不能被下一个使用设备的人拿走。在几个小的演练中，Don 涵盖了使用 GNU shred、ShredOS、`dd` 命令，以及最后的 `nvme-cli`。每一个都可以从你的硬件中删除所有的数据，并对你正在使用的、不再需要的硬盘进行删除。Don 的结论提供了一个温和的提醒：如果你要卖掉你的硬件，这并不意味着下一个人应该拥有你的数据。你的数据是你的。


### 《在 Linux 命令行上生成密码》


正如我在本期中早先时候指出的那样，密码对于今年的安全总结至关重要。在 [这篇文章](https://opensource.com/article/21/7/generate-passwords-pwgen) 中，我们的作者 [Sumantro Mukherjee](https://opensource.com/users/sumantro) 首先介绍了许多网站在涉及到密码时可以有（也应该有）一个严格的规定。这篇文章循序渐进地介绍了如何使用 `pwgen`，首先是安装它，然后是生成密码。这是一个有用的工具，Sumantro 详细介绍了如何使用一些标志来生成符合任何网站或应用的要求和策略的密码。在这篇读物的最后，最后的总结包含了链接到一个方便的开源密码管理器列表，这个列表是我们的另一位作者 [Jason Baker](https://opensource.com/users/jason-baker) 在今年早些时候写的。这是一个重要的读物，可以让你为你在网站上的日常使用制定更好的密码，以防止黑客攻击或丢失你的账户中的数据。


### 《用这个开源软件加密你的文件》


今年的安全总结的最后，是一篇关于加密和加密文件的 [文章](https://opensource.com/article/21/4/open-source-encryption)。[Seth Kenlon](https://opensource.com/users/seth) 介绍了一个名为 VeraCrypt 的开源跨平台加密工具。Seth 的演练深入解释了如何安装和使用 VeraCrypt，并展示了这个很酷的软件的易用性。但在此之前，他还简要介绍了 VeraCrypt 的前身 TrueCrypt 的历史，以及 VeraCrypt 是如何向后兼容以前用 TrueCrypt 的加密卷的。通过这个易于使用的开源加密软件，Seth 已经证明，你可以在本地拥有你的数据，并以你想要的方式进行加密。


### 荣誉提名


虽然这五篇是我今年的最爱，但这里还有两篇同样值得一读的提名文章。


* [Seth Kenlon](https://opensource.com/users/seth) 的《[了解开源安全的 Linus 法则](http://opensource.com/article/21/2/open-source-security)》。
* [Mike Calizo](https://opensource.com/users/mcalizo) 的《[如何成功执行 DevSecOps](http://opensource.com/article/21/2/devsecops)》。


每篇文章都对安全策略和采用情况进行了结构化解读。


### 关于安全的总结


我强烈建议在今年阅读这些文章和 [其他几篇](https://opensource.com/tags/security)。这些将使你为 2022 年安全世界的发展做好准备。你可以成为新一年的安全冠军。


你有一些想要推荐的工具吗？请留下评论或 [提出你的文章构思](https://opensource.com/how-submit-article)。




---


via: <https://opensource.com/article/21/12/open-source-security>


作者：[Jessica Cherry](https://opensource.com/users/cherrybomb) 选题：[lujun9972](https://github.com/lujun9972) 译者：[geekpi](https://github.com/geekpi) 校对：[wxy](https://github.com/wxy)


本文由 [LCTT](https://github.com/LCTT/TranslateProject) 原创编译，[Linux中国](https://linux.cn/) 荣誉推出


OK
One of the most prevalent discussions on Opensource.com in 2021 was about the security and privacy of your own data. A noticeable theme was that your data is yours and that passwords were key to security. This year's security authors provided helpful tips and open source tools for keeping your data and hardware secure.

Here is my top-five countdown of this year's security journey.

[6 open source tools and tips to securing a Linux server for beginners](https://opensource.com/article/21/4/securing-linux-servers)

[Sahana Sreeram](https://opensource.com/users/sahanasreeram01gmailcom) provides six fundamental server security tips, starting with updates and ending with malware scanning. This article provides a head start with your Linux servers either at home or work. Pay extra attention to the password strength section and the tools to create risk-reducing requirements on password policies for your server, as this is the most critical practice on any operating system you are using. This article is a practical guide to working on security in your day-to-day work on Linux servers. As Sahana points out, the security landscape is undoubtedly expanding, and this article gives everyone the chance to start working on prevention.

[5 ways to protect your documents with open source software](https://opensource.com/article/21/4/secure-documents-open-source)

This next article is excellent for people like myself who write a ton of documentation on everything from articles to personal research notes. Author [Ksenia Fedoruk](https://opensource.com/users/ksenia-fedoruk) starts with a list of open source cloud storage services to save your documents. Next, she covers the importance of encryption and the ways to use encryption with our docs. She also covers digital signature and watermarking of documents in clear detail and what open source tools to use. Finally, the article covers the use of password protection of the docs we've made and worked with. The reminder in the ending follows a common theme this year in security: Your data is yours.


[4 Linux tools to erase your data](https://opensource.com/article/21/10/linux-tools-erase-data)

In this article, [Don Watkins](https://opensource.com/users/don-watkins) covers the responsibility and caretaking of hardware. It leads off with a series of tools to wipe hard drives so that your data can't be taken from the next person to use the equipment. In several small walk-throughs, Don covers using GNU shred, ShredOS, the `dd`

command, and finally `nvme-cli`

. Each of these can remove all the data from your hardware and sanitize the hard drives you were working on and no longer need. Don's concluding thoughts provide a gentle reminder that if you are selling your hardware, that doesn't mean the next person should have your data. Your data is yours.

[Generate passwords on the Linux command line](https://opensource.com/article/21/7/generate-passwords-pwgen)

As I pointed out earlier in this countdown, passwords are essential to this year's security round-up. In this article, our writer [Sumantro Mukherjee](https://opensource.com/users/sumantro) starts by covering how many websites can have (and should have) strict rules when it comes to passwords. This step-by-step article covers how to use `pwgen`

, starting by installing it and then generating passwords. This was a useful tool to cover, and Sumantro details how to use some flags to generate a password tailored to any website's or application's requirements and policies. At the end of this read, the final thoughts include a link to a handy list of open source password managers written earlier this year by another of our authors, [Jason Baker](https://opensource.com/users/jason-baker). This is an important read to start making better passwords for your everyday use on websites to prevent hacking or any data loss in your accounts.

[Encrypt your files with this open source software](https://opensource.com/article/21/4/open-source-encryption)

Finally, in this year's security countdown, is an article about encryption and encrypting your files. [Seth Kenlon](https://opensource.com/users/seth) covers an open source cross-platform encryption tool called VeraCrypt. Seth's walk-through explains in-depth how to install and use VeraCrypt and shows the ease of use of this cool bit of software. But not before giving a brief history on VeraCrypts predecessor, TrueCrypt, and how VeraCrypt is backward compatible with previously encrypted volumes by TrueCrypt. With this easy-to-use open source software encryption, Seth has proven that you can own your data locally and encrypt it the way you want.

## Honorable mentions

While these five were my favorite this year, here are two additional honorable mentions that are also worth the read.

- Seth Kenlon's
[Understanding Linus's Law for open source security](http://opensource.com/article/21/2/open-source-security) [Mike Calizo's](https://opensource.com/users/mcalizo)[How to adopt DevSecOps successfully](http://opensource.com/article/21/2/devsecops)

Each of these gives a structured read on security policies and adoption.

## Final thoughts on security

I highly recommend reading each of these articles and [several others](https://opensource.com/tags/security) this year. These will prepare you for what's to come in the world of security in 2022. You could be the new year's security champion.

Have some tools you want to suggest? Leave a comment or [pitch your article idea](https://opensource.com/how-submit-article).

## 1 Comment