|
Extending your business to an increasingly connected and collaborative world requires the confidence and trust that your IT infrastructure is secure and resilient. Linux running on IBM System z servers offers an attractive foundation on which to build a comprehensive security infrastructure, for a number of reasons, including:
Linux on System z can inherit world-class security features
When running Linux on System z, it inherits a comprehensive integrated set of support elements that address a wide range of security issues. System z servers have implemented world-class technologies such as high-performance cryptography, large-scale digital certificate authority and management, improved Secure Sockets Layer (SSL) performance, advanced resource access control function and secure key cryptography. System z has enhanced the ability to help on security issues while embodying industry and international standards. For more information read the details on the System z security web page.
Linux can provide high security
Linux incorporates many of the characteristics and functions found in UNIX and it has inherited a number of UNIX-like security features. These security benefits include e.g. the segmentation of the user domain in a multi-user environment, the isolation of tasks in a multi-tasking environment, a password system that can be encrypted and/or located remotely and much more.
Implementation scenarios
The following articles describe usage scenarios, showing the value of using Linux on System z in a comprehensive security infrastructure:
 |
Web Application Firewalls and the PCI Standard [pg 6] (PDF, 7,31MB)
Malicious hackers moved on to their next target: applications. Web servers, database servers, file servers, etc., all are open to previously uncharted attack vectors. This spurred the creation of a new generation of technologies known as application firewalls. |
| |
|
Secure Key Cryptography [pg 72] (PDF, 13,05MB)
Because the world is changing and data encryption is a hot topic, a crypto 101 project might be needed. Linux on System z applications provide the perfect playground with the ease of programming in the Linux environment and the security available in the System z hardware. |
| |
 |
Making the System z platform the ideal host for a business-critical DMZ
The demilitarized zone (DMZ) traditionally refers to buffers designed to ensure the safety of borders and to provide stability far beyond those borders. All social Land political tensions aside, the DMZ is supposed to be a relatively safe place. |
| |
|
Cutting-Edge Cryptography (PDF, 505.7KB)
This article lifts the cryptography shroud a little, defines and simplifies some basic terminology and shows how Linux on System z can be used in a System z enterprise solution. In a short timeframe, the cryptographic support has grown to symmetric algorithms, digital signatures and secure key functions. |
| |
|
Security Advantages of IBM System z9 and Virtualization on z/VM, Sine Nominee (PDF, 148.2KB)
This white paper is an excellent high level overview of the security advantages of the IBM z9 Business Class (z9 BC) server in conjunction with z/VM. |
But most importantly, because Linux is an open source operating system, it is supported by literally tens of thousands of developers worldwide. This broad and diverse developer community continuously probes and tests Linux security.
 |
 |
|
 |
|
Products
IBM and its partners offer a range of software security products to run on Linux-based System z servers. |
|
|
|
|
 |
|
Security certification
The security certification of IBM System z products and Linux can help to build a security-rich on demand infrastructure. |
|
|
|
|
 |
|
Get started
IBM and its partners complement their product offering with a variety of consulting and management services to provide comprehensive security solutions to customers. |
|
|
|
| 
