What is Tripwire?
Tripwire is a form intrusion detection system (IDS) that helps you keep tabs on the integrity of the files on your computer. Quite simply it will help identify files or modifications made to your system in the event someone compromised your system.
How does Tripwire work?
Tripwire works on a pretty easy to understand concept. Basically, when you install Tripwire on your linux box you tell it to scan your system and create a database of checksums and information. Once you have a good reference point or database setup, you then scan your system on a regular basis for modifications to your file system.
Why would I want run a file system integrity software?
If you have ever had your system compromised by a cracker, it's an extremely frustrating time. You never know what they have done, where they have been, or what files they have modified or installed. This type of application helps in the recovery process. Quite often crackers will installed a group of applications on your system called a rootkit. A rootkit overwrites many of your commonly used system files to help hide the tracks of the cracker, or leave a backdoor on your system so he can return at a later date. Often the types of files modified are ones such as ps and netstat. By installing their own version of applications like these they can hide the fact there is additional daemons and processes running the background.
How do I put Tripwire to practical use?
Tripwire can be configured to send you e-mails at a set time interval via Sendmail or SMTP. On small systems it wouldn't be unreasonable to have your system checked several times a day and have Tripwire e-mail you the results. If you don't want the results e-mailed you can store the information in a file for later review. I believe it is a handy tool to have the logs e-mailed to you, so a problem can be quickly identified.
Thought Tripwire won't protect you from hackers, it will help you identify the level of which your system has been compromised and if scanned at regular time intervals should help you reduce the amount of time for which your system has been compromised. If your system has been broken in to, then the best thing to do is isolate the machine from the network and rebuilt it from know good backups and try to determine the method of entry.
Ken Dennis
http://KenDennis-RSS.homeip.net/
In today's business world it's all but impossible to escape... Read More
The title of "software engineer" has got to be among... Read More
Sticky Noteshttp://www.deprice.com/stickynote.htmWith StickyNote 9.0, you can create beautiful 3D notes... Read More
What is IRC?IRC is Internet Relay Chat. It is a... Read More
Creating a new markup language.Introduction.General Reuse Markup Langauge, or GRML,... Read More
Features Additionally, Vista will include many other new features.Aero Vista... Read More
Microsoft CRM is CRM answer from Microsoft Business Solutions.The whole... Read More
Background: For many organizations like ours, the interim target of... Read More
Microsoft Business Solutions ? Great Plains has captured the US... Read More
C++ Function templates are those functions which can handle different... Read More
I like my software simple. If it's too complex or... Read More
Microsoft CRM is CRM answer from Microsoft Business Solutions. If... Read More
Homeland security, airport security, Internet security â?" these days weâ??re... Read More
Microsoft Great Plains, former Great Plains Software Dynamics / eEnterprise... Read More
Microsoft Business Solutions Great Plains has I'd say end user... Read More
Microsoft CRM is relatively new player on the now becoming... Read More
Here is some free software tools to help you build... Read More
What is Groupware?Have you ever had to manage document collaboration... Read More
Need software to record your voice, streaming audio or musical... Read More
IntroductionSurprised, by the title? well, this is a tour of... Read More
If you're online using a dialup Internet connection, you'll probably... Read More
Microsoft Great Plains could be tuned and setup to fit... Read More
The vast majority of us will have, at some point,... Read More
Microsoft Retail Management System serves retail single store as well... Read More
There are two approaches for application integration:? Programmer's approach ?... Read More
The COSMIC FP (function point) software quality metric, is no... Read More
IBM Lotus Domino or Microsoft Exchange?The severe competition continues for... Read More
The objective for Zandi Digital is to make available clever... Read More
Designing without tables by using CSS layouts is fast becoming... Read More
If you have Microsoft Great Plains and support it... Read More
This article is the first of a series of articles... Read More
Microsoft CRM is CRM application, maintained and supported by Microsoft... Read More
People often ask me: What image file formats will Photoshop... Read More
Here is some free software tools to help you build... Read More
There are certain pluses and minuses in both cases and... Read More
Microsoft Great Plains and Microsoft CRM become more and more... Read More
If your company has regional and worldwide operations, you might... Read More
Preventive Maintenance (PM) is defined as scheduled work done on... Read More
This article illustrates the best practices to improve the performance... Read More
The Windows registry is a huge database that ensures normal... Read More
To all web designers out there, this article is for... Read More
Microsoft Business Solutions Great Plains is written in Great Plains... Read More
The objective for Zandi Digital is to make available clever... Read More
Customer Relationship Management or CRM is a combination of enterprise... Read More
Almost all new and major brand of PCs come with... Read More
Have you noticed WordPerfect is gearing up for a comeback... Read More
It is a well known fact that Java as a... Read More
Document Manager and Version HistoryIn previous articles I have discussed... Read More
With thousands of web pages added to the Net every... Read More
Microsoft CRM is CRM application, maintained and supported by Microsoft... Read More
... Read More
Looks like Microsoft Great Plains becomes more and more popular,... Read More
Let's first look at your ERP system selection (without Retail... Read More
Let's say that you have a software project that's under... Read More
Most people don't use Photoshop to its fullest capabilities. Here... Read More
Whether you have used Microsoft Word for years, have just... Read More
Our opinion is based on our Microsoft Business Solutions Great... Read More
MicroWorld Technologies, Inc. the leading solutions provider in the area... Read More
Homeland security, airport security, Internet security â?" these days weâ??re... Read More
This article will not attempt to advocate the use of... Read More
Microsoft Word is one of the most popular office applications... Read More
Before September 1995, Microsoft Windows was an MS-DOS program. DOS... Read More
Costs of fleet maintenance software can vary widely. It is... Read More
You would like to protect your documents, wouldn't you? Reasons... Read More
I've been active in the Cisco Certification track for four... Read More
All your software is stored on a hard-drive. But how... Read More
Software |