Intrusion Detection Systems mailing list archives

Re: strings in backdoor binaries


From: dgailey () insync net (DPG)
Date: Fri, 28 Apr 2000 18:27:21 -0500 (CDT)


Archive: http://msgs.securepoint.com/ids
FAQ: http://www.ticm.com/kb/faq/idsfaq.html
IDS: http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
UNSUBSCRIBE: email "unsubscribe ids" to majordomo () uow edu au
The real answer would be to install tripwire after you install
your operating systems. and thoughts on commercial software that matches
checksums of binary files for specific version information or installed
default to that particular OS. This would make a great idea for a gnu
project. anyone know if anything of this type has been introduced into the
community?

-DPG
  

.                                                 .
                        . 

             
                                       
        
                             

   
                                  .


Current thread: