Intrusion detection on a UNIX system

Intrusion detection on a UNIX system

Would you please direct me to a source that will define specific areas to monitor for intrusion detection on a UNIX system, with the possibility of scripts for HP-UX to help better organize, define and audit for intrusion detection?


There

    Requires Free Membership to View

    SearchSecurity.com members gain immediate and unlimited access to breaking industry news, virus alerts, new hacker threats, highly focused security newsletters, and more -- all at no cost. Join me on SearchSecurity.com today!

    Michael S. Mimoso, Editorial Director

    By submitting your registration information to SearchSecurity.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchSecurity.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

are a number of resources at www.sans.org, www.securityfocus.com and other security sites that discuss various security aspects. You can also look at www.sage.org, which is the System Administrators' Guild in Usenix. They have a section on securing Solaris, most of which is applicable to HP/UX, too, and "The Sysadmin's Bookshelf."

You should also look at HP, too. HP has a number of products lumped together as "Praesidium" that include intrusion detection among them. They are among the best available for any Unix, so you should strongly consider looking at that. Also, on their Web site, they have a number of security-related manuals, papers and topics, which I found by searching for "intrusion detection." Take a look at http://my.itrc.hp.com/ for more information.


This was first published in March 2001