- ホーム
- > 洋書
- > 英文書
- > Internet / General
Full Description
Leverage Your Security Expertise in IBM (R) System z (TM) Mainframe EnvironmentsFor over 40 years, the IBM mainframe has been the backbone of the world's largest enterprises. If you're coming to the IBM System z mainframe platform from UNIX (R), Linux (R), or Windows (R), you need practical guidance on leveraging its unique security capabilities. Now, IBM experts have written the first authoritative book on mainframe security specifically designed to build on your experience in other environments. Even if you've never logged onto a mainframe before, this book will teach you how to run today's z/OS (R) operating system command line and ISPF toolset and use them to efficiently perform every significant security administration task. Don't have a mainframe available for practice? The book contains step-by-step videos walking you through dozens of key techniques. Simply log in and register your book at www.ibmpressbooks.com/register to gain access to these videos.The authors illuminate the mainframe's security model and call special attention to z/OS security techniques that differ from UNIX, Linux, and Windows. They thoroughly introduce IBM's powerful Resource Access Control Facility (RACF) security subsystem and demonstrate how mainframe security integrates into your enterprise-wide IT security infrastructure. If you're an experienced system administrator or security professional, there's no faster way to extend your expertise into "big iron" environments.Coverage includesMainframe basics: logging on, allocating and editing data sets, running JCL jobs, using UNIX System Services, and accessing documentation Creating, modifying, and deleting users and groups Protecting data sets, UNIX file system files, databases, transactions, and other resources Manipulating profiles and managing permissions Configuring the mainframe to log security events, filter them appropriately, and create usable reports Using auditing tools to capture static configuration data and dynamic events, identify weaknesses, and remedy them Creating limited-authority administrators: how, when, and why
Contents
Foreword xvPreface xviiAcknowledgments xixAbout the Authors xxiChapter 1 Introduction to the Mainframe 11.1 Why Use a Mainframe? 11.2 Getting Started 41.3 Job Control Language (JCL) 71.4 z/OS UNIX System Services 191.5 Getting Help 221.6 Additional Information 25Chapter 2 Users and Groups 272.1 Creating a User 272.2 How to Modify a User for OMVS Access 312.3 Groups 362.4 zSecure 422.5 Additional Information 43Chapter 3 Protecting Data Sets and Other Resources 453.1 Protecting Data Sets 453.2 Other Resources 573.3 Security Data (Levels, Categories, and Labels) 643.4 Securing UNIX System Services (USS) Files 683.5 zSecure 703.6 Additional Information 71Chapter 4 Logging 734.1 Configuring Logging 734.2 Generating Reports 824.3 UNIX System Services (USS) Logging 914.4 Logging in zSecure 954.5 Additional Information 97Chapter 5 Auditing 995.1 Auditing 995.2 The RACF Data Security Monitor (DSMON) 1005.3 The Set RACF Options (SETROPTS) Command 1085.4 The RACF Database Unload Utility (IRRDBU00) 1105.5 The RACF Health Checks 1145.6 zSecure Auditing 1185.7 Additional Information 120Chapter 6 Limited-Authority RACF Administrators 1216.1 Profiles Owned by Users 1216.2 Group-Owned Profiles and Group Authorities 1226.3 System-Level Authorities 1286.4 Manipulating Users 1296.5 Additional Information 133Chapter 7 Mainframes in the Enterprise-Wide Security Infrastructure 1357.1 What Is an Enterprise? 1367.2 Enterprise Security Administration 1447.3 Communicating between Enterprises-and Beyond 1487.4 Additional Information 149Index 151