Tripwire: A File System Integrity Checker

1
Tripwire A File System Integrity Checker
2

• Introduction
• What is Intrusion Detection?
• Intrusion detection is the art of detecting
  inappropriate, incorrect or anomalous activity.
• Who is an intruder?
• An intruder is some entity accessing/using a
  system beyond their authority
• Why Intrusion Detection?
• To aid system administrators

3

• Classification of tools aiding Intrusion
  detection
• Anomaly detectors
• Example Tripwire
• Misuse detectors

4

• Why Tripwire?
• A scenario explaining how Tripwire can help the
  system administrators to detect any intrusion.

5

• Design and Implementation of Tripwire
• High level operation

6

• Tripwire Modes of Operation
• Database Initialization
• Integrity Checking
• Database Update
• Interactive Database Update

7

• Conclusion
• Any Questions?