Experiences With Tripwire: Using Integrity Checkers for Intrusion Detection.

Published: Feb 20, 2000
Updated: Feb 20, 2000
Section: Network Security Library :: Intrusion Detection
Author: Gene H. Kim
Printable Version
Adjust font size:
Rating: 3/5 - 1 Votes

This paper begins by motivating the need for an integrity checker by presenting a hypothetical situation any system administrator could face. An overview of Tripwire is then described, emphasizing the salient aspects of Tripwire configuration that supports its use at sites employing modern variants of the Unix operating system. Experiences with how Tripwire has been used in the field are then presented, along with some sonjectures on the prevalence and extent of system breakins. Novel uses of Tripwire and notable configurations of Tripwire are also presented.

Click Here to download this article