Register your product to gain access to bonus material or receive a coupon.
Mainframe Basics for Security Professionals: Getting Started with RACF
- By Ori Pomerantz, Barbara Vander Weele, Mark Nelson, Tim Hahn
- Published Dec 28, 2007 by IBM Press.
eBook
- Your Price: $42.39
- List Price: $52.99
- Includes EPUB and PDF
- About eBook Formats
This eBook includes the following formats, accessible from your Account page after purchase:
EPUB
The open industry format known for its reflowable content and usability on supported mobile devices.
PDF
The popular standard, used most often with the free Acrobat® Reader® software.
This eBook requires no passwords or activation to read. We customize your eBook by discreetly watermarking it with your name, making it uniquely yours.
Description
- Copyright 2008
- Edition: 1st
- eBook
- ISBN-10: 0-13-279973-1
- ISBN-13: 978-0-13-279973-7
Leverage Your Security Expertise in IBM® System z™ Mainframe Environments
For over 40 years, the IBM mainframe has been the backbone of the world’s largest enterprises. If you’re coming to the IBM System z mainframe platform from UNIX®, Linux®, or Windows®, you need practical guidance on leveraging its unique security capabilities. Now, IBM experts have written the first authoritative book on mainframe security specifically designed to build on your experience in other environments.
Even if you’ve never logged onto a mainframe before, this book will teach you how to run today’s z/OS® operating system command line and ISPF toolset and use them to efficiently perform every significant security administration task. Don’t have a mainframe available for practice? The book contains step-by-step videos walking you through dozens of key techniques. Simply log in and register your book at www.ibmpressbooks.com/register to gain access to these videos.
The authors illuminate the mainframe’s security model and call special attention to z/OS security techniques that differ from UNIX, Linux, and Windows. They thoroughly introduce IBM’s powerful Resource Access Control Facility (RACF) security subsystem and demonstrate how mainframe security integrates into your enterprise-wide IT security infrastructure. If you’re an experienced system administrator or security professional, there’s no faster way to extend your expertise into “big iron” environments.
Coverage includes
- Mainframe basics: logging on, allocating and editing data sets, running JCL jobs, using UNIX System Services, and accessing documentation
- Creating, modifying, and deleting users and groups
- Protecting data sets, UNIX file system files, databases, transactions, and other resources
- Manipulating profiles and managing permissions
- Configuring the mainframe to log security events, filter them appropriately, and create usable reports
- Using auditing tools to capture static configuration data and dynamic events, identify weaknesses, and remedy them
- Creating limited-authority administrators: how, when, and why
Sample Content
Table of Contents
Foreword xv
Preface xvii
Acknowledgments xix
About the Authors xxi
Chapter 1 Introduction to the Mainframe 1
1.1 Why Use a Mainframe? 1
1.2 Getting Started 4
1.3 Job Control Language (JCL) 7
1.4 z/OS UNIX System Services 19
1.5 Getting Help 22
1.6 Additional Information 25
Chapter 2 Users and Groups 27
2.1 Creating a User 27
2.2 How to Modify a User for OMVS Access 31
2.3 Groups 36
2.4 zSecure 42
2.5 Additional Information 43
Chapter 3 Protecting Data Sets and Other Resources 45
3.1 Protecting Data Sets 45
3.2 Other Resources 57
3.3 Security Data (Levels, Categories, and Labels) 64
3.4 Securing UNIX System Services (USS) Files 68
3.5 zSecure 70
3.6 Additional Information 71
Chapter 4 Logging 73
4.1 Configuring Logging 73
4.2 Generating Reports 82
4.3 UNIX System Services (USS) Logging 91
4.4 Logging in zSecure 95
4.5 Additional Information 97
Chapter 5 Auditing 99
5.1 Auditing 99
5.2 The RACF Data Security Monitor (DSMON) 100
5.3 The Set RACF Options (SETROPTS) Command 108
5.4 The RACF Database Unload Utility (IRRDBU00) 110
5.5 The RACF Health Checks 114
5.6 zSecure Auditing 118
5.7 Additional Information 120
Chapter 6 Limited-Authority RACF Administrators 121
6.1 Profiles Owned by Users 121
6.2 Group-Owned Profiles and Group Authorities 122
6.3 System-Level Authorities 128
6.4 Manipulating Users 129
6.5 Additional Information 133
Chapter 7 Mainframes in the Enterprise-Wide Security Infrastructure 135
7.1 What Is an Enterprise? 136
7.2 Enterprise Security Administration 144
7.3 Communicating between Enterprises–and Beyond 148
7.4 Additional Information 149
Index 151
More Information
Other Things You Might Like
- Online Video $239.99