Tripwire: A File System Integrity Checker
80 likes | 221 Vues
Tripwire: A File System Integrity Checker. Introduction What is Intrusion Detection? Intrusion detection is the art of detecting inappropriate, incorrect or anomalous activity. Who is an intruder? An intruder is some entity accessing/using a system beyond their authority
Tripwire: A File System Integrity Checker
E N D
Presentation Transcript
Introduction What is Intrusion Detection? Intrusion detection is the art of detecting inappropriate, incorrect or anomalous activity. Who is an intruder? An intruder is some entity accessing/using a system beyond their authority Why Intrusion Detection? To aid system administrators
Classification of tools aiding Intrusion detection Anomaly detectors Example Tripwire Misuse detectors
Why Tripwire? A scenario explaining how Tripwire can help the system administrators to detect any intrusion.
Design and Implementation of Tripwire High level operation
Tripwire: Modes of Operation Database Initialization Integrity Checking Database Update Interactive Database Update
Conclusion Any Questions?