What is Tripwire?
Tripwire is a form intrusion detection system (IDS) that helps you keep tabs on the integrity of the files on your computer. Quite simply it will help identify files or modifications made to your system in the event someone compromised your system.
How does Tripwire work?
Tripwire works on a pretty easy to understand concept. Basically, when you install Tripwire on your linux box you tell it to scan your system and create a database of checksums and information. Once you have a good reference point or database setup, you then scan your system on a regular basis for modifications to your file system.
Why would I want run a file system integrity software?
If you have ever had your system compromised by a cracker, it's an extremely frustrating time. You never know what they have done, where they have been, or what files they have modified or installed. This type of application helps in the recovery process. Quite often crackers will installed a group of applications on your system called a rootkit. A rootkit overwrites many of your commonly used system files to help hide the tracks of the cracker, or leave a backdoor on your system so he can return at a later date. Often the types of files modified are ones such as ps and netstat. By installing their own version of applications like these they can hide the fact there is additional daemons and processes running the background.
How do I put Tripwire to practical use?
Tripwire can be configured to send you e-mails at a set time interval via Sendmail or SMTP. On small systems it wouldn't be unreasonable to have your system checked several times a day and have Tripwire e-mail you the results. If you don't want the results e-mailed you can store the information in a file for later review. I believe it is a handy tool to have the logs e-mailed to you, so a problem can be quickly identified.
Thought Tripwire won't protect you from hackers, it will help you identify the level of which your system has been compromised and if scanned at regular time intervals should help you reduce the amount of time for which your system has been compromised. If your system has been broken in to, then the best thing to do is isolate the machine from the network and rebuilt it from know good backups and try to determine the method of entry.
Ken Dennis
http://kendennis-rss.homeip.net/
Great Plains Integration Manager scripting and translation - overview for... Read More
.Net Framework is a platform or development environment to seamlessly... Read More
Microsoft Business Solutions Great Plains is marketed for mid-size companies... Read More
Learning how to program software seems like a daunting task... Read More
Looks like Microsoft Great Plains becomes more and more popular,... Read More
If there still are few unprotected computers left, I haven't... Read More
Logistics automation is often considered as barcoding extension to Sales... Read More
Which Type of Shop Can Rely On A Home Built... Read More
Should one use Windows Update?This topic has good and valid... Read More
Currently Microsoft Business Solutions is on the way of creating... Read More
Music downloads are off the charts! We're listening to digital... Read More
As you probably know, when Microsoft purchased Great Plains Software... Read More
Microsoft Business Solutions Great Plains is marketed for mid-size companies... Read More
What is Interactive Mapping?Interactive mapping is a visual display medium... Read More
Microsoft Business Solutions Great Plains is marketed for mid-size companies... Read More
1. With mapping software you can create a report that... Read More
If you're online using a dialup Internet connection, you'll probably... Read More
Microsoft Outlook is one of the most widely used software... Read More
In the new era of internet marketing the problem of... Read More
MS CRM is very close to document workflow automation, including... Read More
In a previous article, I wrote about OpenOffice... Read More
Microsoft Business Solutions Great Plains, former Great Plains Software Dynamics... Read More
XML Server can be a Web Server that stores the... Read More
With thousands of web pages added to the Net every... Read More
Microsoft Business Solutions Great Plains serves to the wide spectrum... Read More
shuttle from Midway Munster are ..Microsoft released Service Pack 2 (SP2) for the Windows XP... Read More
Microsoft Great Plains has full-featured Manufacturing suite of modules: Capacity... Read More
In the case when you represent mid-size or mid-size-to-large business,... Read More
Microsoft Outlook is one of the most widely used software... Read More
Microsoft Great Plains serves the wide spectrum of horizontal markets.... Read More
Need software to record your voice, streaming audio or musical... Read More
Microsoft Business Solutions Great Plains has several options to enable... Read More
Microsoft CRM has built-in conversion tool, however you should probably... Read More
Which Type of Shop Can Rely On A Home Built... Read More
Introduction to C++Why Learn C++?C++ may at first seem like... Read More
Microsoft Business Solutions Great Plains is marketed for mid-size companies... Read More
Looks like Microsoft Great Plains becomes more and more popular,... Read More
Ok... Where to start?Well, I guess I will start at... Read More
Several software companies design programs for preventive maintenance. Most of... Read More
Microsoft Business Solutions CRM is present several years on the... Read More
At the end of XX century, in the late 1990th... Read More
When you double-click a layer in the Layer Palette, you... Read More
We were recently faced with a decision: either to let... Read More
Microsoft Business Solutions ? Navision is an integrated solution for... Read More
If you look back to the history, you will see... Read More
The purpose of one of our projects was MS Exchange... Read More
Great Plains Fixed Assets Management module is a robust tool... Read More
Beginning with Domino version R4 it has integration with the... Read More
An operating system (abbreviated OS) is essentially the path through... Read More
Customer Relationship Management (CRM) is a strategy and processes used... Read More
Software |