Samhain (software): Difference between revisions

Open Source Tripwire
Developer(s)	FRLinux (formerly Ron Forrester)
Stable release	3.0.5 / 11 July 2012 [1]
Operating system	Linux, all POSIX/UNIX Systems
Type	Security, Monitoring, HIDS
License	GNU General Public License
Website	la-samhna.de/samhain

Content deleted Content added

Inline

Revision as of 12:19, 31 July 2012

Samhain is an integrity checker and host intrusion detection system that can be used on single hosts as well as large, UNIX-based networks. It supports central monitoring as well as powerful (and new) stealth features to run undetected in memory, using steganography.

Complete integrity check
- uses cryptographic checksums of files to detect modifications,
- can find rogue SUID executables anywhere on disk, and

Centralized monitoring
- native support for logging to a central server via encrypted and authenticated connections

Tamper resistance
- database and configuration files can be signed
- log file entries and e-mail reports are signed
- support for stealth operation

This software article is a stub. You can help Wikipedia by expanding it.

@@ Line 1: / Line 1: @@
+{{Infobox software
+|name = Open Source Tripwire
+|logo =
+|caption =
+|screenshot =
+|developer = FRLinux (formerly Ron Forrester)
+|latest release version = 3.0.5
+|latest release date = 11 July 2012 {{ref|Sourceforge project page}}
+|operating_system = [[Linux]], all [[POSIX]]/[[UNIX]] Systems
+|genre = Security, Monitoring, [[Host-based intrusion detection system|HIDS]]
+|license = [[GNU General Public License]]
+|website = [http://www.la-samhna.de/samhain/ la-samhna.de/samhain]
+}}
 '''Samhain''' is an [[integrity checker]] and host [[intrusion detection system]] that can be used on single hosts as well as large, [[UNIX]]-based [[computer network|networks]]. It supports central monitoring as well as powerful (and new) stealth features to run undetected in [[Random access memory|memory]], using [[steganography]].