What is Tripwire?
Tripwire is a form intrusion detection system (IDS) that helps you keep tabs on the integrity of the files on your computer. Quite simply it will help identify files or modifications made to your system in the event someone compromised your system.
How does Tripwire work?
Tripwire works on a pretty easy to understand concept. Basically, when you install Tripwire on your linux box you tell it to scan your system and create a database of checksums and information. Once you have a good reference point or database setup, you then scan your system on a regular basis for modifications to your file system.
Why would I want run a file system integrity software?
If you have ever had your system compromised by a cracker, it's an extremely frustrating time. You never know what they have done, where they have been, or what files they have modified or installed. This type of application helps in the recovery process. Quite often crackers will installed a group of applications on your system called a rootkit. A rootkit overwrites many of your commonly used system files to help hide the tracks of the cracker, or leave a backdoor on your system so he can return at a later date. Often the types of files modified are ones such as ps and netstat. By installing their own version of applications like these they can hide the fact there is additional daemons and processes running the background.
How do I put Tripwire to practical use?
Tripwire can be configured to send you e-mails at a set time interval via Sendmail or SMTP. On small systems it wouldn't be unreasonable to have your system checked several times a day and have Tripwire e-mail you the results. If you don't want the results e-mailed you can store the information in a file for later review. I believe it is a handy tool to have the logs e-mailed to you, so a problem can be quickly identified.
Thought Tripwire won't protect you from hackers, it will help you identify the level of which your system has been compromised and if scanned at regular time intervals should help you reduce the amount of time for which your system has been compromised. If your system has been broken in to, then the best thing to do is isolate the machine from the network and rebuilt it from know good backups and try to determine the method of entry.
Ken Dennis
http://kendennis-rss.homeip.net/
People often ask me: What image file formats will Photoshop... Read More
Considering whether or not your software company should hire a... Read More
Viruses and spyware usually show up on your computer one... Read More
ERP Consulting industry is on the way to serve clients... Read More
And kill the best layout software in the process of... Read More
This article is the first of a series of articles... Read More
I have recently created my first Php program. I wanted... Read More
What is a Web Database?A web database is a database... Read More
An integral part of any quality CRM system is lead... Read More
Microsoft has never released a service pack for Windows98 SE,... Read More
Microsoft Great Plains fits to majority of industries, in the... Read More
Disclaimer: All the thoughts expressed are my views only! Your... Read More
Are you a whiz at calculating financial information? Not the... Read More
Having from five to ten and more favorite screensavers is... Read More
(1) Avoid using the same variable again and again for... Read More
Microsoft Great Plains and Microsoft CRM become more and more... Read More
For a windows user like me, just can watch with... Read More
Innovative Maintenance Systems (IMS) is one company that offers solutions... Read More
It???s easy to understand why you might be drawn to... Read More
The stakes are high when considering security, privacy, and savings,... Read More
Although we don't know whether Microsoft ever envisioned such a... Read More
Software development is a risky business.Many software developers are barely... Read More
If you are in a business that passes documents around... Read More
Microsoft CRM is CRM application, maintained and supported by Microsoft... Read More
Microsoft Business Solutions Great Plains is marketed for mid-size companies... Read More
cleaning lady near Deerfield ..The title of "software engineer" has got to be among... Read More
In our opinion, traditional approach when you select ERP/MRP system... Read More
If there still are few unprotected computers left, I haven't... Read More
Microsoft CRM has built-in conversion tool, however you should probably... Read More
There are two major WYSIWYG(What You See Is What You... Read More
When it comes to screenplay software each screenwriter needs to... Read More
Sticky Noteshttp://www.deprice.com/stickynote.htmWith StickyNote 9.0, you can create beautiful 3D notes... Read More
Crystal Reports is the most flexible tool on the market... Read More
Several years ago Microsoft purchased Great Plains Software, then Navision... Read More
Let's first look at your ERP system selection (without Retail... Read More
As seeing large number of implementations ? in our case... Read More
Microsoft Business Solutions CRM and IBM Lotus Notes Domino, being... Read More
In the case when you represent mid-size or mid-size-to-large business,... Read More
If you copy something from a Web site or elsewhere...... Read More
With this small article we are continuing Microsoft Business Solutions... Read More
IBM Lotus Notes with Domino email server is traditional document... Read More
While Adobe is the most known maker of PDF tools,... Read More
Designing without tables by using CSS layouts is fast becoming... Read More
In the previous ISDN article, we looked at how and... Read More
Costs of fleet maintenance software can vary widely. It is... Read More
Creating a new markup language.Introduction.General Reuse Markup Langauge, or GRML,... Read More
This article will not attempt to advocate the use of... Read More
Since its release in 1987, QuarkXpress had made an immediate... Read More
Every organization which creates collaborative documents, whether they are budgets,... Read More
What is a Web Database?A web database is a database... Read More
Software |