Doug Stewart on 6 Jul 2010 08:12:02 -0700


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] Intrusion Detection/Prevention System


Tripwire was deprecated in favor of AIDE, IIRC...

--
Doug Stewart

On Jul 6, 2010, at 10:09 AM, Jason Stelzer <jason.stelzer@gmail.com> wrote:

> Snort is pretty cool from a network monitoring perspective. If you are
> looking for file system integrity checks, have a look at tripwire.
> 
> http://www.linuxjournal.com/article/8758
> 
> The single most important thing with tripwire is to make sure that
> your file checksums are on read only media. If it turns out to be too
> clumsy, my apologies. But it might help you out.
> 
> On Tue, Jul 6, 2010 at 10:03 AM, linc <linc@lincgeek.org> wrote:
>> Trotter Cashion wrote:
>>> Hey everyone,
>>> 
>>> I need an intrusion detection / prevention system to both pass a
>>> security audit and keep my servers safe. Sadly, I know jack about this
>>> kind of software. Does anyone have any recommendations? Toby recommended
>>> Snort, which looks like it could be OK. Basically, just looking for
>>> something simple to setup / configure. Do those two words exist in
>>> combination with IDS?
>>> 
>>> - Trotter
>>> 
>>> 
>>> ------------------------------------------------------------------------
>>> 
>>> ___________________________________________________________________________
>>> Philadelphia Linux Users Group         --        http://www.phillylinux.org
>>> Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
>>> General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug
>> 
>> OSSEC.
>> http://www.ossec.net/
>> 
>> 
>> --
>> -Linc Fessenden
>> 
>> In the Beginning there was nothing, which exploded - Yeah right...
>> ___________________________________________________________________________
>> Philadelphia Linux Users Group         --        http://www.phillylinux.org
>> Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
>> General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug
>> 
> 
> 
> 
> -- 
> J.
> ___________________________________________________________________________
> Philadelphia Linux Users Group         --        http://www.phillylinux.org
> Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
> General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug