Re: Host Based IDS Recommendations?

dreamwvr_at_dreamwvr.com
Date: 10/11/03

  • Next message: Zach Forsyth: "FW: Host Based IDS Recommendations?" 
    Date: Sat, 11 Oct 2003 09:02:03 -0600
To: Alvin Wong <alvin.wong@b2b.com.my>

    On Fri, Oct 10, 2003 at 02:40:51PM +0800, Alvin Wong wrote:
    > Hi,
    >
    > I would like to find out for Windows boxes if there are any
    > recommendations for Host based IDS, i know that for unix there is AIDE,
    > linux, tripwire. What are the solutions for Windows machines? Would
    > running a software IDS that is capable of monitoring and protecting the
    > file systems a la tripwire with signed hashes kept in removable media be
    > sufficient? If there are, what are the usual suspects for host based IDS
    > that is used prevalently in industry? I'm hoping for both free and
    > commercial solutions
    Alvin;
         Well you could try the cywin port of AIDE if it is still
    around. Then adjust for taste. TMTOWTDI.

    Best REgards,
    dreamwvr@dreamwvr.com 

    -- 
/*  Security is a work in progress - dreamwvr                 */
#                               48 69 65 72 6F 70 68 61 6E 74 32
# Note: To begin Journey type man afterboot,man help,man hier[.]      
# 66 6F 72 20 48 69 72 65                              0000 0001
// "Who's Afraid of Schrodinger's Cat?" /var/(.)?mail/me \?  ;-]
---------------------------------------------------------------------------
Captus Networks IPS 4000
Intrusion Prevention and Traffic Shaping Technology to: 
 - Instantly Stop DoS/DDoS Attacks, Worms & Port Scans
 - Automatically Control P2P, IM and Spam Traffic
 - Precisely Define and Implement Network Security & Performance Policies
FREE Vulnerability Assessment Toolkit - WhitePapers - Live Demo 
http://www.securityfocus.com/sponsor/CaptusNetworks_focus-ids_000101
---------------------------------------------------------------------------
  • Next message: Zach Forsyth: "FW: Host Based IDS Recommendations?"

    Relevant Pages

    • Host Based IDS Recommendations?
      ... I would like to find out for Windows boxes if there are any ... recommendations for Host based IDS, i know that for unix there is AIDE, ... what are the usual suspects for host based IDS ... Intrusion Prevention and Traffic Shaping Technology to: ...
      (Focus-IDS)
    • Re: Host Based IDS Recommendations?
      ... > I would like to find out for Windows boxes if there are any ... > recommendations for Host based IDS, i know that for unix there is AIDE, ... what are the usual suspects for host based IDS ... "Intrusion Prevention technology such as TRUSHIELD™ is designed to not only ...
      (Focus-IDS)
    • Re: Host based IDS methodology and testing
      ... Host based IDS methodology and testing ... >Any production experience with any of the above products, ... Time delays in reporting alerts are often very dependent on the ...
      (Focus-IDS)
    • RE: Host based IDS methodology and testing
      ... I've successfully deployed Snort as a HIDS on a number of production servers ... Host based IDS methodology and testing ...
      (Focus-IDS)
    • Re: IDS is dead, etc
      ... > wouldn't call 'em an IDS, I think they're something different, much ... the host. ... Ensure Reliable Performance of Mission Critical Applications ... Precisely Define and Implement Network Security and Performance Policies ...
      (Focus-IDS)