IDS mailing list archives

can tripwire be used for sensor integrity???


From: "Gaurav_Jindal" <gaurav_jindal () da-iict org>
Date: Sun, 1 Feb 2004 21:57:52 +0530


I got to know that tripwire coudl work to find out the integrity , can 
it be used for integrity of sensors.
As what I read from tripwire that

Tripwire creates a 'secure' (normally kept on a read-only disk/diskette 
along w/ the tripwire executable) database of file and directory 
attributes (including, if you want, complex MD5 and snefru signatures) 
which then can be used to compare against to see if a file or directory 
has changed somehow. If a cracker has broken in and replaced 
your /bin/date file w/ a trojan horse version, tripwire will let you 
know.

do let me know is someone has used some kind of stuff like this for ids 
sensors  to find attack in distributed environment?..

Thanking you,
With Regards,
Gaurav Jindal


---------------------------------------------------------------------------
---------------------------------------------------------------------------


Current thread: