Intrusion Detection Systems
|
|
| Minimum IDS Recommendations |
Host-based IDS ( HIDS )
- Download and Install Tripwire
- Download and Install Log File Checking Apps
- Tar up your /bin /sbin /usr/sbin /usr/bin /etc files BEFORE you go live
- Hourly compare the check sum of your current binaries against the original tar file above
Network-based IDS ( NIDS )
- Download and Install and anti-sniffer
- You should do everything to minimize/eliminate false alarms
|
| IDS Mailing List |
|
| IDS FAQs & HOWTOs |
|
| Loggers, Log Viewers and Log Analyzers |
|
| Network Sniffers |
|
| IDS Lists |
|
| HIDS - Host-based IDS |
HIDS - Checks for server activity/security
List of HIDS
|
| NIDS - Network-based IDS |
NIDS - Checks for network activity/security
List of NIDS
|
| FIDS - FileSystem-based IDS |
Check binaries and file/directory permissions and file integrity
List of FIDS
|
| Permission Checking |
|
| To Sort out |
|