What is Tripwire?
Tripwire is a form intrusion detection system (IDS) that helps you keep tabs on the integrity of the files on your computer. Quite simply it will help identify files or modifications made to your system in the event someone compromised your system.
How does Tripwire work?
Tripwire works on a pretty easy to understand concept. Basically, when you install Tripwire on your linux box you tell it to scan your system and create a database of checksums and information. Once you have a good reference point or database setup, you then scan your system on a regular basis for modifications to your file system.
Why would I want run a file system integrity software?
If you have ever had your system compromised by a cracker, it's an extremely frustrating time. You never know what they have done, where they have been, or what files they have modified or installed. This type of application helps in the recovery process. Quite often crackers will installed a group of applications on your system called a rootkit. A rootkit overwrites many of your commonly used system files to help hide the tracks of the cracker, or leave a backdoor on your system so he can return at a later date. Often the types of files modified are ones such as ps and netstat. By installing their own version of applications like these they can hide the fact there is additional daemons and processes running the background.
How do I put Tripwire to practical use?
Tripwire can be configured to send you e-mails at a set time interval via Sendmail or SMTP. On small systems it wouldn't be unreasonable to have your system checked several times a day and have Tripwire e-mail you the results. If you don't want the results e-mailed you can store the information in a file for later review. I believe it is a handy tool to have the logs e-mailed to you, so a problem can be quickly identified.
Thought Tripwire won't protect you from hackers, it will help you identify the level of which your system has been compromised and if scanned at regular time intervals should help you reduce the amount of time for which your system has been compromised. If your system has been broken in to, then the best thing to do is isolate the machine from the network and rebuilt it from know good backups and try to determine the method of entry.
Ken Dennis
http://kendennis-rss.homeip.net/
Whether you are a small consultancy firm, a medium sized... Read More
.Net Framework is a platform or development environment to seamlessly... Read More
Upgrading. Downtime. Maintenance. Hardware obsolescence. Implementation issues. The litany of... Read More
It???s easy to understand why you might be drawn to... Read More
As you probably know, when Microsoft purchased Great Plains Software... Read More
Microsoft Business Solutions Great Plains, former Great Plains Software Dynamics... Read More
One of the main reasons business owners and entrepreneurs use... Read More
Finding the best spyware removers to detect and remove spyware... Read More
The most important things you can do for your computer... Read More
IntroductionSurprised, by the title? well, this is a tour of... Read More
Microsoft Business Solutions main middle market ERP application - Microsoft... Read More
We are in a transition phase in the Managerial Administration... Read More
I provide, here clear explanations and a count of function... Read More
CD and DVD replication is a process that works by... Read More
What is Snort?Snort is an open source network intrusion detection... Read More
Java has come along a long way. Many would agree... Read More
Adobe Photoshop is one of the world's leading graphics editing... Read More
Microsoft Business Solutions offers several ERP applications: Great Plains, Navision,... Read More
When you double-click a layer in the Layer Palette, you... Read More
Linux essentials:It's free for download but you have to pay... Read More
Assertion facility is added in J2SE 1.4. In order to... Read More
Microsoft Business Solutions Small Business Manager is scaled down Great... Read More
XML Server can be a Web Server that stores the... Read More
Follow the steps below to quickly design, generate, and deploy... Read More
Microsoft CRM is CRM application, maintained and supported by Microsoft... Read More
efficient cleaning crew Highland Park ..It is possible that if one avoided all sources of... Read More
Java has come along a long way. Many would agree... Read More
Language development computer: Computer-based method for aiding language development seems... Read More
Spyware is like the new technological nuclear weapon on the... Read More
2005 ? Back to the Future.What does the future hold?... Read More
Running Applications in Compatibility Mode With Windows XP, you can... Read More
Document Manager and Version HistoryIn previous articles I have discussed... Read More
When Great Plains Software introduced the first graphical accounting application... Read More
Microsoft Business Solutions Great Plains is very good fit for... Read More
When reading an article where some term is used often,... Read More
Microsoft Business Solutions Great Plains has substantial market share among... Read More
We don't think about mainframe software pricing anymore, we just... Read More
Executive SummaryAn effective plan for entering, cleaning and updating the... Read More
What is 'adware'?Adware is basically software or scripts that are... Read More
Having from five to ten and more favorite screensavers is... Read More
Bad News - the Threat is Bigger than it SeemedHow... Read More
Scrapbooks are very popular these days. I think that almost... Read More
Small can be beautiful! Working with Knoppix for the past... Read More
Whether you are an experienced web programmer or a complete... Read More
It won't matter how effective your WinRunner Team is if... Read More
While I was preparing some personal background information for a... Read More
How do you run a program on a remote server... Read More
One day, you suddenly realize that your computer started to... Read More
1. Replace Dexterity cursor with SQL Stored Procedure Dexterity... Read More
Microsoft Business Solutions main middle market ERP application - Microsoft... Read More
Software |