What is Tripwire?
Tripwire is a form intrusion detection system (IDS) that helps you keep tabs on the integrity of the files on your computer. Quite simply it will help identify files or modifications made to your system in the event someone compromised your system.
How does Tripwire work?
Tripwire works on a pretty easy to understand concept. Basically, when you install Tripwire on your linux box you tell it to scan your system and create a database of checksums and information. Once you have a good reference point or database setup, you then scan your system on a regular basis for modifications to your file system.
Why would I want run a file system integrity software?
If you have ever had your system compromised by a cracker, it's an extremely frustrating time. You never know what they have done, where they have been, or what files they have modified or installed. This type of application helps in the recovery process. Quite often crackers will installed a group of applications on your system called a rootkit. A rootkit overwrites many of your commonly used system files to help hide the tracks of the cracker, or leave a backdoor on your system so he can return at a later date. Often the types of files modified are ones such as ps and netstat. By installing their own version of applications like these they can hide the fact there is additional daemons and processes running the background.
How do I put Tripwire to practical use?
Tripwire can be configured to send you e-mails at a set time interval via Sendmail or SMTP. On small systems it wouldn't be unreasonable to have your system checked several times a day and have Tripwire e-mail you the results. If you don't want the results e-mailed you can store the information in a file for later review. I believe it is a handy tool to have the logs e-mailed to you, so a problem can be quickly identified.
Thought Tripwire won't protect you from hackers, it will help you identify the level of which your system has been compromised and if scanned at regular time intervals should help you reduce the amount of time for which your system has been compromised. If your system has been broken in to, then the best thing to do is isolate the machine from the network and rebuilt it from know good backups and try to determine the method of entry.
Ken Dennis
http://kendennis-rss.homeip.net/
Make-or-Break Factors in Success and ProfitabilityFor quick printers, estimating can... Read More
Microsoft Business Solutions Great Plains is written in Great Plains... Read More
The stakes are high when considering security, privacy, and savings,... Read More
If you have been using the Internet for any amount... Read More
The cornerstone of successful automated office systems is the ability... Read More
Every day millions of new web documents emerge on the... Read More
Microsoft CRM is CRM answer from Microsoft and attempt to... Read More
Did you ever give a thought to the number of... Read More
When you need a phone number, you do a quick... Read More
Google Inc. has launched a new software package that allows... Read More
I started using PIP (Picture It Publishing) Platinum 2002 right... Read More
Although we don't know whether Microsoft ever envisioned such a... Read More
You would like to protect your documents, wouldn't you? Reasons... Read More
RSS (Really Simple Syndication) is a way for a site... Read More
Table of Contents1) Introduction 2) Related Work 3) Framework 4)... Read More
Three highly respected names in Human Resources have joined forces... Read More
What is Colossus?Colossus is software licensed to about twenty-five insurance... Read More
I've been active in the Cisco Certification track for four... Read More
Simply put, fleet maintenance allows companies to monitor and maintain... Read More
Music downloads are off the charts! We're listening to digital... Read More
Great Plains Purchase Order Processing (POP) module makes up one-third... Read More
Some companies that are in need of fleet management may... Read More
Find out why Spyware Removal from computers is important and... Read More
Corporate ERP/MRP selection might be tough one, especially considering very... Read More
This article illustrates the best practices to improve the performance... Read More
reliable home cleaners Arlington Heights ..One of the things we can be as certain of... Read More
Adobe Photoshop is one of the world's leading graphics editing... Read More
Software Engineering is the Systematic Approach for analysis design implementation... Read More
In our small article we'll consider Microsoft Business Solutions Great... Read More
Great Plains Integration Manager scripting and translation - overview for... Read More
Since technology changes so quickly, it is hard to begin... Read More
Microsoft CRM is CRM application, maintained and supported by Microsoft... Read More
Hey Guys! Don't raise your eyebrows or fear by hearing... Read More
When you need a phone number, you do a quick... Read More
When my daughter was getting into AOL instant messaging (AIM)... Read More
Which Type of Shop Can Rely On A Home Built... Read More
Microsoft Business Solutions Great Plains is written in Great Plains... Read More
So let's begin crunching down these 300 images using Adobe... Read More
After almost two decades of existence, Quark has become the... Read More
Google Inc. has launched a new software package that allows... Read More
Although statistics often is blamed for various deadly sins --... Read More
Follow the steps below to quickly design, generate, and deploy... Read More
If you have Microsoft Great Plains and support it for... Read More
Music downloads are off the charts! We're listening to digital... Read More
First we had the original Google search that evolved into... Read More
When it comes to running an office, the SOHO entrepreneur... Read More
Accounts payable is just one area of office management where... Read More
Just imagine: you are walking, say, towards your car, and... Read More
Microsoft Business Solutions Great Plains has several options to enable... Read More
RSS (Really Simple Syndication) is a way for a site... Read More
Software |