Samhain (software): Difference between revisions
Appearance
Content deleted Content added
Removed sidebar link "Languages > Deutsch" (German page was removed in 2009) Tag: Removal of interwiki link; Wikidata is live |
No edit summary |
||
Line 1: | Line 1: | ||
{{Infobox software |
|||
|name = Open Source Tripwire |
|||
|logo = |
|||
|caption = |
|||
|screenshot = |
|||
|developer = FRLinux (formerly Ron Forrester) |
|||
|latest release version = 3.0.5 |
|||
|latest release date = 11 July 2012 {{ref|Sourceforge project page}} |
|||
|operating_system = [[Linux]], all [[POSIX]]/[[UNIX]] Systems |
|||
|genre = Security, Monitoring, [[Host-based intrusion detection system|HIDS]] |
|||
|license = [[GNU General Public License]] |
|||
|website = [http://www.la-samhna.de/samhain/ la-samhna.de/samhain] |
|||
}} |
|||
'''Samhain''' is an [[integrity checker]] and host [[intrusion detection system]] that can be used on single hosts as well as large, [[UNIX]]-based [[computer network|networks]]. It supports central monitoring as well as powerful (and new) stealth features to run undetected in [[Random access memory|memory]], using [[steganography]]. |
'''Samhain''' is an [[integrity checker]] and host [[intrusion detection system]] that can be used on single hosts as well as large, [[UNIX]]-based [[computer network|networks]]. It supports central monitoring as well as powerful (and new) stealth features to run undetected in [[Random access memory|memory]], using [[steganography]]. |
||
Revision as of 12:19, 31 July 2012
Developer(s) | FRLinux (formerly Ron Forrester) |
---|---|
Stable release | 3.0.5
/ 11 July 2012 [1] |
Operating system | Linux, all POSIX/UNIX Systems |
Type | Security, Monitoring, HIDS |
License | GNU General Public License |
Website | la-samhna.de/samhain |
Samhain is an integrity checker and host intrusion detection system that can be used on single hosts as well as large, UNIX-based networks. It supports central monitoring as well as powerful (and new) stealth features to run undetected in memory, using steganography.
Main features
- Complete integrity check
- uses cryptographic checksums of files to detect modifications,
- can find rogue SUID executables anywhere on disk, and
- Centralized monitoring
- native support for logging to a central server via encrypted and authenticated connections
- Tamper resistance
- database and configuration files can be signed
- log file entries and e-mail reports are signed
- support for stealth operation
External links