Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Focus-IDS
[Top] [All Lists]

RE: using HIDS for change control

Subject: RE: using HIDS for change control
Date: Thu, 25 Aug 2005 05:25:10 -0400
Yes. Tripwire does this. Their underlying technology detects change.

Ron Gula, CTO
Tenable Network Security


On Thu, 25 Aug 2005 5:21am, Rivera,Angel L. wrote:
Does anyone on this list know of a sponsor that is using HIDS to monitor
changes to a system's (Unix & Windows) configuration?


The goal is to build a server according to specs (this would include
hardening of the OS + agency specific security settings) then use a HIDS
to detect and alert on any changes.


Theoretically speaking, I know this can be done, but is anyone doing
this?

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
------------------------------------------------------------------------
--rgula

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more.
------------------------------------------------------------------------


<Prev in Thread] Current Thread [Next in Thread>