[olug] LAMP/linux security audit

[Brian Wiese]

A friend of mine is in a startup company in VA and is looking for a
Linux/LAMP security auditor to give them a high level of assurance that
the system they are about to deploy is secure.  In addition to distro/3rd
party software scans, this may involve an audit of source code they've
developed (php mostly) as well.

Can anyone recommend (even themselves) an experienced auditor to do this
or where to find one? (CISA,SANS,LUG lists I expect -- where is the Omaha
SANSUG?) My friend's business is just a startup company, so there is
probably no policy to audit against, but just the industry standards... so
someone whose got a good methodology, toolset, and eye of experience in
what to look for to give them a quick report of their status is whats
desired.

Please contact me off-list for individual recommendations, other
suggestions to the list.

Thanks,
Brian
-- 
Campus Coodinator, Americans for Informed Democracy (AID)
http://www.unomaha.edu/aid
"What we do in life, echoes in eternity" - Gladiator
http://brianwiese.net

-- 
Campus Coodinator, Americans for Informed Democracy (AID)
http://www.unomaha.edu/aid
"What we do in life, echoes in eternity" - Gladiator
http://brianwiese.net