RE: TripWire like product

["Jon Pastore" <jpastore () idetech net>]

I was recently made painfully aware that products like tripwire can be
trojaned easily for local attacks...something to consider...I'm
co-located application servers @ client offices for an app I would like
to protect and it's a risk I'm aware of send a server out with our code
on it in a Linux environment especially with the code being in perl. =) 

I'm using a myriad of obstacles to track/block potential bad users from
the client site protecting them from malicious internet users is
easy...it's that whole local thing that difficult... 

Jon Pastore, President
IDE Tech, Inc.
(954) 360-0393 Office
(954) 428-0442 Fax



-----Original Message-----
From: xan () wyrmslair net [mailto:xan () wyrmslair net] 
Sent: Wednesday, April 16, 2003 6:13 AM
To: Brown, Tony; security-basics () securityfocus com
Subject: Re: TripWire like product


Hi Tony,

i'd take a look at the Veracity software.
It's not free but its open source.
I testet the suite at work and i liked it very much.
It runs on almost any platform and has a centralized 
administration.
  You may get a free evaluation version on request at 
http://www.veracity.com

--Thomas

On Mon, 14 Apr 2003 14:38:05 -0500
  "Brown, Tony" <TBrown2 () nmff org> wrote:
> Hello All,
>
> My supervisor is open source minded and would not like to
> spend the bucks on Tripwire.  Can anyone suggest an open 
> source comparison that will run on multiple Unix 
> platforms?
>
> Thanks,
>
> Tony

------------------------------------------------------------------------
---
Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam,
the 
world's premier event for IT and network security experts.  The two-day 
Training features 6 hand-on courses on May 12-13 taught by
professionals.  
The two-day Briefings on May 14-15 features 24 top speakers with no
vendor 
sales pitches.  Deadline for the best rates is April 25.  Register today
to 
ensure your place.
http://www.securityfocus.com/BlackHat-security-basics 
------------------------------------------------------------------------
----


---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam, the 
world's premier event for IT and network security experts.  The two-day 
Training features 6 hand-on courses on May 12-13 taught by professionals.  
The two-day Briefings on May 14-15 features 24 top speakers with no vendor 
sales pitches.  Deadline for the best rates is April 25.  Register today to 
ensure your place.  http://www.securityfocus.com/BlackHat-security-basics 
----------------------------------------------------------------------------