Intrusion Detection Systems mailing list archives

Re: strings in backdoor binaries


From: je () sekure net (Jonas Eriksson)
Date: Sat, 29 Apr 2000 13:50:54 +0200 (CEST)


Archive: http://msgs.securepoint.com/ids
FAQ: http://www.ticm.com/kb/faq/idsfaq.html
IDS: http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
UNSUBSCRIBE: email "unsubscribe ids" to majordomo () uow edu au

There is Toby, http://www.buttsoft.com/~thumper/software/sysadmin/Toby/ 

GPL


-- 
Jonas Eriksson 
je () sekure net +46-70-6770986
http://www.sekure.net/jonas/

On Fri, 28 Apr 2000, DPG wrote:

Archive: http://msgs.securepoint.com/ids
FAQ: http://www.ticm.com/kb/faq/idsfaq.html
IDS: http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
HELP: Having problems... email questions to ids-owner () uow edu au
NOTE: Remove this section from reply msgs otherwise the msg will bounce.
SPAM: DO NOT send unsolicted mail to this list.
UNSUBSCRIBE: email "unsubscribe ids" to majordomo () uow edu au
-----------------------------------------------------------------------------
The real answer would be to install tripwire after you install
your operating systems. and thoughts on commercial software that matches
checksums of binary files for specific version information or installed
default to that particular OS. This would make a great idea for a gnu
project. anyone know if anything of this type has been introduced into the
community?

-DPG
  


.                                                 .
                        . 

             
                                       
        
                           

   
                              .






Current thread: