Free Intrusion Detection (IDS) and Prevention (IPS) Software
AIDE (Advanced Intrusion Detection Environment) is a free replacement for Tripwire. It does the same things as the semi-free Tripwire and more.
It creates a database from the regular expression rules that it finds from the config file. Once this database is initialized it can be used to verify the integrity of the files. It has several message digest algorithms (md5,sha1,rmd160,tiger,haval,etc.) that are used to check the integrity of the file. More algorithms can be added with relative ease. All of the usual file attributes can also be checked for inconsistencies. It can read databases from older or newer versions. See the manual pages within the distribution for further info. There is also a beginning of a manual.
Basically AIDE runs on any moderns Unix. Below is a list of platforms people are actually running AIDE on (That I know of). Please let me know if you are running aide on something else.
* Solaris 2.5.1,2.6,7,8,9,10
* Linux 2.x
* FreeBSD 2.2.8,3.4
* Unixware 7.0.1
* BSDi 4.1
* OpenBSD 2.6,3.0
* AIX 4.2
* TRU64 4.0x
* HP-UX 11i
* Cygwin
For more details, visit http://www.cs.tut.fi/~rammer/aide.html
|
No responses found. Be the first to respond and make money from revenue sharing program.
|