topic Re: Host Intrusion Detection System (HIDS) in Operating System - Linux

Host Intrusion Detection System (HIDS)

Wendy_9 — Wed, 10 Mar 2004 02:53:19 GMT

Hi all,

Does anyone use HIDS for linux? If yes, which software are you use? Can anyone provide some information for me because I am sourcing a HIDS for run on linux platform.

Thanks

Regards,
Wendy

Re: Host Intrusion Detection System (HIDS)

Jerome Henry — Wed, 10 Mar 2004 03:50:15 GMT

I like prelude, multipurpose configurable IDS :
http://www.prelude-ids.org
It's hybrid, nids and hids upon config parameters...
hth

J

Re: Host Intrusion Detection System (HIDS)

Wendy_9 — Wed, 10 Mar 2004 05:24:02 GMT

Do you know how to configure it as HIDS?

Thanks

Regards,
Wendy

Re: Host Intrusion Detection System (HIDS)

Jerome Henry — Wed, 10 Mar 2004 07:21:37 GMT

It's easier than NIDS ! Just a question of sensors : look at :
http://www.prelude-ids.org/article.php3?id_article=6

J

Re: Host Intrusion Detection System (HIDS)

dirk dierickx — Thu, 11 Mar 2004 08:34:09 GMT

most famous is probably tripwire (http://www.tripwire.com). if you are looking for free software i can recommend aide (http://www.cs.tut.fi/~rammer/aide.html).