What are advantages and disadvantages of using such a tool

Assignment Help Computer Network Security

Reference no: EM131826753

Problem

An example of a host-based intrusion detection tool is the tripwire program. This is a file integrity checking tool that scans files and directories on the system on a regular basis and notifies the administrator of any changes. It uses a protected database of cryptographic checksums for each file checked and compares this value with that recomputed on each file as it is scanned. It must be configured with a list of files and directories to check and what changes, if any, are permissible to each. It can allow, for example, log files to have new entries appended, but not for existing entries to be changed. What are the advantages and disadvantages of using such a tool? Consider the problem of determining which files should only change rarely, which files may change more often and how, and which change frequently and hence cannot be checked. Consider the amount of work in both the configuration of the program and on the system administrator monitoring the responses generated.

Reference no: EM131826753

Questions Cloud

What types of information could be used : What types of information could be used? What does this use suggest to you about the content and detail of such information?

The egyptian revolution : A popular uprising that started on January 25, 2011 in Egypt led to the 2011 Egyptian Revolution. Polls show that about 69%

Discuss the considerations that should come into play : Discuss the considerations that should come into play when deciding on locations for wireless NIDS sensors.

Assisted reproductive technology : Assisted Reproductive Technology (ART) is a collection of techniques that help facilitate pregnancy (e.g. in vitro fertilization).

What are advantages and disadvantages of using such a tool : What are the advantages and disadvantages of using such a tool? Consider the problem of determining which files should only change rarely.

What are the key customer needs that Nordstrom aims to fill : How would you characterize the competitive strategy of a high-end department store chain such as Nordstrom? What are the key customer needs that Nordstrom aims?

What are the hypotheses for testing if yawning : What are the hypotheses for testing if yawning is contagious, i.e. whether it is more likely for someone to yawn if they see someone else yawning?

What are some weaknesses of a packet filtering firewall : What information is used by a typical packet filtering firewall? What are some weaknesses of a packet filtering firewall?

What is an application-level gateway : What is the difference between a packet filtering firewall and a stateful inspection firewall? What is an application-level gateway?

User Account

All Pages