Re: [LIH] [Bulk] Re: Security and Intrusion Detection
newlxusr-/[email protected]
| Newsgroups | gmane.user-groups.linux.india.help |
|---|---|
| Message-ID | <[email protected]> |
>On Sun, 14 Mar 2010 15:56:56 +0530 >Arun Khan <[email protected]> wrote: > > Audit file signatures using aide or tripwire. It is important to > keep a 'read only' copy of the initial signatures offline and *not* on > the system itself for the cracker to his/her way > I will try aide or tripwire , but : Is it possible to store signatures of of a fresh Linux installed files using some common linux command to some backup file on other HDD partition / removable USB pen-drive . And then compare these backup signatures with installed Linux box using - diff , diff3 , cmp or some other common command ? > Security is a process and not a product. See above. Also google > search for 'rootkit' and use it to verify if critical system tools > like 'ps, ls ' have been replaced with compromised versions. > OK, sir ! > > Suggest you read up and get your basic fundae on networking excellent > book "The Linux Network Administrator's Guide" by Olaf Kirch and Terry Thnks ! I assume you have a vast & practical experience at your campus sir-ji ! I would dafinately like to have some more inputs from you on this subject (protecting our Linux Box from online threats ) - which you think may be of more importance to a common Linux user in a simple and lucid manner. Many users like me will be highly obliged ! I request Suresh also & other experienced members to kindly share their knowledge on this subject. You people have real-world practical experience. So pl guide more ! ~ Pats ------------------------------------------------------------------------------ Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev