Detecting attacks with the Tripwire IDS

Silent Guardian

Article from Issue 148/2013

The simple but effective Tripwire HIDS provides its service quietly and discreetly, preventing attackers from infecting computers with trojans, backdoors, or modified files by identifying anomalies unnoticed by the user.

Intrusion Detection Systems (IDS) detect attacks on computers and networks by monitoring network traffic and recognizing attack patterns and anomalies.

Some IDS tools detect evidence of an attack by searching for unexpected configuration changes. If the IDS works as intended, it will alert the administrator responsible for the system when it discovers an attack. This prompt notification mitigates, and sometimes even prevents, any damage associated with the attack.

Buy this article as PDF

Express-Checkout as PDF
Price $2.95
(incl. VAT)

Buy Linux Magazine

Get it on Google Play

US / Canada

Get it on Google Play

UK / Australia

Related content

  • Tripwire IDS

    Tripwire is a powerful tool that protects your systems against unwanted changes.

  • Security Lessons: System Rescue

    Kurt provides some tips and recommends some tools to help you detect signs of network intrusion and data corruption.

  • Host-Based IDS

    A host-based intrusion detection system is a simple but powerful tool for finding traces of an attacker's footprint.

comments powered by Disqus
Subscribe to our Linux Newsletters
Find Linux and Open Source Jobs
Subscribe to our ADMIN Newsletters

Support Our Work

Linux Magazine content is made possible with support from readers like you. Please consider contributing when you’ve found an article to be beneficial.

Learn More