OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Host IDS
From: Talisker (TaliskerNETWORKINTRUSION.CO.UK)
Date: Thu Nov 02 2000 - 14:02:50 CST

RE: RE: Host IDSFollowing the debate about categorising file integrity checkers as IDS, last night I was advised about a product called SecureEXE which at first glance looks like an another access control tool, but it also checks the integrity of a file every time the user tries to run it, checking not only whether the user is allowed to run that particular file but also whether whether the file has been altered. It sounds good, but has anyone any eperience of any tools like it ?
There's a few bits about it on my site under IDS > File integrity checkers
It's getting a little closer to the debated near real time requirement

Andy
http://www.networkintrusion.co.uk
Talisker's Network Security Tools List
                    '''
                 (0 0)
  ----oOO----(_)----------
  | The geek shall |
  | Inherit the earth |
  -----------------oOO----
               |__|__|
                  || ||
              ooO Ooo
taliskernetworkintrusion.co.uk

The opinions contained within this transmission are entirely my own, and do
not necessarily reflect those of my employer.