What is Tripwire?
Tripwire is a form intrusion detection system (IDS) that helps you keep tabs on the integrity of the files on your computer. Quite simply it will help identify files or modifications made to your system in the event someone compromised your system.
How does Tripwire work?
Tripwire works on a pretty easy to understand concept. Basically, when you install Tripwire on your linux box you tell it to scan your system and create a database of checksums and information. Once you have a good reference point or database setup, you then scan your system on a regular basis for modifications to your file system.
Why would I want run a file system integrity software?
If you have ever had your system compromised by a cracker, it's an extremely frustrating time. You never know what they have done, where they have been, or what files they have modified or installed. This type of application helps in the recovery process. Quite often crackers will installed a group of applications on your system called a rootkit. A rootkit overwrites many of your commonly used system files to help hide the tracks of the cracker, or leave a backdoor on your system so he can return at a later date. Often the types of files modified are ones such as ps and netstat. By installing their own version of applications like these they can hide the fact there is additional daemons and processes running the background.
How do I put Tripwire to practical use?
Tripwire can be configured to send you e-mails at a set time interval via Sendmail or SMTP. On small systems it wouldn't be unreasonable to have your system checked several times a day and have Tripwire e-mail you the results. If you don't want the results e-mailed you can store the information in a file for later review. I believe it is a handy tool to have the logs e-mailed to you, so a problem can be quickly identified.
Thought Tripwire won't protect you from hackers, it will help you identify the level of which your system has been compromised and if scanned at regular time intervals should help you reduce the amount of time for which your system has been compromised. If your system has been broken in to, then the best thing to do is isolate the machine from the network and rebuilt it from know good backups and try to determine the method of entry.
Ken Dennis
http://kendennis-rss.homeip.net/
Microsoft Business Solutions Great Plains might be considered as ERP... Read More
Well, even if the combination might look very unusual, we... Read More
What is Colossus?Colossus is software licensed to about twenty-five insurance... Read More
Enabling Chinese input is quick and easy, there are only... Read More
Microsoft Business Solutions Great Plains was historically designed to serve... Read More
This article is the third of a series of articles... Read More
2005 ? Back to the Future.What does the future hold?... Read More
Microsoft Business Solutions Great Plains serves multiple industries in the... Read More
MSN messenger is a pretty cool invention. I mean I'm... Read More
Most people understand that the "hardware" part of their computer... Read More
C++ Function templates are those functions which can handle different... Read More
There are several kinds of software piracy. The bottom line... Read More
Case study: A secretary using Corel WordPerfect 7 is often... Read More
IBM Lotus Domino or Microsoft Exchange?The severe competition continues for... Read More
Microsoft released Service Pack 2 (SP2) for the Windows XP... Read More
Microsoft Business Solutions ? Great Plains has captured the US... Read More
ERP Consulting industry is on the way to serve clients... Read More
Microsoft Business Solutions Great Plains, former Great Plains Software eEnterprise,... Read More
Here is some free software tools to help you build... Read More
.Net Framework is a platform or development environment to seamlessly... Read More
If you have Microsoft Great Plains and support it... Read More
You would like to protect your documents, wouldn't you? Reasons... Read More
When it comes to screenplay software each screenwriter needs to... Read More
This article is for advanced Microsoft CRM SDK C# developers.... Read More
Just stress testing one of the latest Linux distributions. Been... Read More
home cleaning services Wilmette ..Microsoft Great Plains ? ERM from Microsoft Business Solutions and... Read More
eStore Advantage allows front-office applications to communicate with back-office business... Read More
Microsoft Business Solutions Great Plains is marketed for mid-size companies... Read More
If you're online using a dialup Internet connection, you'll probably... Read More
The major reason I recommend getting your hands on real... Read More
Microsoft CRM is relatively new player on the now becoming... Read More
Lotus Domino/Notes ? Microsoft Great Plains tandem as ERP with... Read More
An operating system (abbreviated OS) is essentially the path through... Read More
IntroductionSurprised, by the title? well, this is a tour of... Read More
Find out why Spyware Removal from computers is important and... Read More
There is many things more frustrating than surfing a website... Read More
During the years of our consulting practice, which comes back... Read More
Shareware has been fighting the stigma of being misunderstood for... Read More
For those who are unclear on the differences between the... Read More
If you use Microsoft Outlook (or similar applications) for e-mailing,... Read More
Remember back in the days where screensavers were the coolest... Read More
There are several kinds of software piracy. The bottom line... Read More
There are plenty of articles out there about how to... Read More
Sticky Noteshttp://www.deprice.com/stickynote.htmWith StickyNote 9.0, you can create beautiful 3D notes... Read More
Lotus Notes Domino is very efficient in electronic document workflow... Read More
In this short FAQ style article we would like to... Read More
Handling character strings in Java is supported through two final... Read More
Are you lost in the mess of documents that get... Read More
Looking at all the ads which promise to get rid... Read More
Mapping Software Improves Data VisualizationFrom the outset, it is important... Read More
Software |