What is Tripwire?
Tripwire is a form intrusion detection system (IDS) that helps you keep tabs on the integrity of the files on your computer. Quite simply it will help identify files or modifications made to your system in the event someone compromised your system.
How does Tripwire work?
Tripwire works on a pretty easy to understand concept. Basically, when you install Tripwire on your linux box you tell it to scan your system and create a database of checksums and information. Once you have a good reference point or database setup, you then scan your system on a regular basis for modifications to your file system.
Why would I want run a file system integrity software?
If you have ever had your system compromised by a cracker, it's an extremely frustrating time. You never know what they have done, where they have been, or what files they have modified or installed. This type of application helps in the recovery process. Quite often crackers will installed a group of applications on your system called a rootkit. A rootkit overwrites many of your commonly used system files to help hide the tracks of the cracker, or leave a backdoor on your system so he can return at a later date. Often the types of files modified are ones such as ps and netstat. By installing their own version of applications like these they can hide the fact there is additional daemons and processes running the background.
How do I put Tripwire to practical use?
Tripwire can be configured to send you e-mails at a set time interval via Sendmail or SMTP. On small systems it wouldn't be unreasonable to have your system checked several times a day and have Tripwire e-mail you the results. If you don't want the results e-mailed you can store the information in a file for later review. I believe it is a handy tool to have the logs e-mailed to you, so a problem can be quickly identified.
Thought Tripwire won't protect you from hackers, it will help you identify the level of which your system has been compromised and if scanned at regular time intervals should help you reduce the amount of time for which your system has been compromised. If your system has been broken in to, then the best thing to do is isolate the machine from the network and rebuilt it from know good backups and try to determine the method of entry.
Ken Dennis
http://kendennis-rss.homeip.net/
MicroWorld Technologies, Inc. the leading solutions provider in the area... Read More
Microsoft Business Solutions Great Plains and MS CRM (client relation... Read More
I have always had a tendency to focus on the... Read More
Microsoft Business Solutions Great Plains is mid and even corporate... Read More
Microsoft Great Plains is main Microsoft Business Solutions accounting package... Read More
Well, even if the combination might look very unusual, we... Read More
OEComplete is a utility for managing the personal information of... Read More
Microsoft Business Solutions Great Plains is marketed for mid-size companies... Read More
According to a survey conducted by InfoTrends/CAP Ventures entitled "Content-Centric... Read More
This article illustrates the best practices to improve the performance... Read More
The Windows Indexing Service provides you with the ability to... Read More
A LOT OF UNWANTED FILES.When you uninstall an item of... Read More
With thousands of web pages added to the Net every... Read More
Security flaws have long plagued Internet Explorer (IE), the market-dominating... Read More
Viruses and spyware usually show up on your computer one... Read More
Task Manager is a Windows system utility that displays thetasks... Read More
Microsoft CRM has built-in conversion tool, however you should probably... Read More
Before September of 1995, Microsoft ignored the Internet because their... Read More
Think of this, first we had the HAM Radio, then... Read More
Programming Help for BeginnersWe write programs to instruct computers. When... Read More
DBxtra goes ASPGetting to the information hidden within corporate databases... Read More
Microsoft Business Solutions Great Plains is marketed for mid-size companies... Read More
I started using PIP (Picture It Publishing) Platinum 2002 right... Read More
Passwords protect your most sensitive personal, financial and business information.... Read More
Bill of Lading is required report for Logistics and Freight... Read More
Antigo wedding limo ..It would be easy to think, like most people apparently... Read More
Before September of 1995, Microsoft ignored the Internet because their... Read More
Looks like Microsoft Great Plains becomes more... Read More
Microsoft Great Plains and Microsoft CRM become more and more... Read More
In 2004 Oracle, Inc. made its new step toward J2EE... Read More
If you're online using a dialup Internet connection, you'll probably... Read More
Bad News - the Threat is Bigger than it SeemedHow... Read More
For a long time now Microsoft's Internet Explorer has ruled... Read More
Microsoft Great Plains is one of three Microsoft Business Solutions... Read More
Looks like Microsoft Great Plains becomes more and more popular,... Read More
Looks like Microsoft Great Plains becomes more and more... Read More
The Software 2005 conference is now a wrap. This conference,... Read More
Microsoft Outlook is one of the most widely used software... Read More
It's not very often I get excited about a software... Read More
I love new technology. I am still ready to wait... Read More
Microsoft Business Solutions Great Plains serves to the wide spectrum... Read More
MS CRM is very close to document workflow automation, including... Read More
Microsoft has never released a service pack for Windows98 SE,... Read More
Let's first look at your ERP system selection (without Retail... Read More
Microsoft Business Solutions main middle market ERP application - Microsoft... Read More
XML Server can be a Web Server that stores the... Read More
User interfaces and accessibility are some of the most important... Read More
While several preventive maintenance software manufacturers offer free trials for... Read More
Are you a whiz at calculating financial information? Not the... Read More
In our opinion, traditional approach when you select ERP/MRP system... Read More
Software |