Host Intrusion Detection System (HIDS)

[Wendy_9]

Hi all,

Does anyone use HIDS for linux? If yes, which software are you use? Can anyone provide some information for me because I am sourcing a HIDS for run on linux platform.

Thanks

Regards,
Wendy

[Jerome Henry · Accepted solution]

I like prelude, multipurpose configurable IDS :
http://www.prelude-ids.org
It's hybrid, nids and hids upon config parameters...
hth

J

[Wendy_9]

Do you know how to configure it as HIDS?

Thanks

Regards,
Wendy

[Jerome Henry]

It's easier than NIDS ! Just a question of sensors : look at :
http://www.prelude-ids.org/article.php3?id_article=6

J

[dirk dierickx]

most famous is probably tripwire (http://www.tripwire.com). if you are looking for free software i can recommend aide (http://www.cs.tut.fi/~rammer/aide.html).