80 likes | 216 Views
Tripwire: A File System Integrity Checker. Introduction What is Intrusion Detection? Intrusion detection is the art of detecting inappropriate, incorrect or anomalous activity. Who is an intruder? An intruder is some entity accessing/using a system beyond their authority
E N D
Introduction What is Intrusion Detection? Intrusion detection is the art of detecting inappropriate, incorrect or anomalous activity. Who is an intruder? An intruder is some entity accessing/using a system beyond their authority Why Intrusion Detection? To aid system administrators
Classification of tools aiding Intrusion detection Anomaly detectors Example Tripwire Misuse detectors
Why Tripwire? A scenario explaining how Tripwire can help the system administrators to detect any intrusion.
Design and Implementation of Tripwire High level operation
Tripwire: Modes of Operation Database Initialization Integrity Checking Database Update Interactive Database Update
Conclusion Any Questions?