Intrusion Detection Systems mailing list archives
RE: strings in backdoor binaries
From: Jim.Meritt () wang com (Meritt, Jim)
Date: Sat, 29 Apr 2000 19:05:03 -0400
Archive: http://msgs.securepoint.com/ids FAQ: http://www.ticm.com/kb/faq/idsfaq.html IDS: http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html UNSUBSCRIBE: email "unsubscribe ids" to majordomo () uow edu au There appears to be a misunderstanding. I'm not talking about a system that I have. I cannot pre-trojan get ANYTHING about it. I didn't ask that. I knew about Tripwire years ago, and wrote my own to check multiple systems across a network. If I wondered about that I would have asked. I didn't. Anyone care to answer what I DID ask? -----Original Message----- From: DPG To: Gary Flynn Cc: ids () uow edu au Sent: 4/28/00 7:27 PM Subject: Re: IDS: strings in backdoor binaries Archive: http://msgs.securepoint.com/ids FAQ: http://www.ticm.com/kb/faq/idsfaq.html IDS: http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html UNSUBSCRIBE: email "unsubscribe ids" to majordomo () uow edu au ------------------------------------------------------------------------ ----- The real answer would be to install tripwire after you install your operating systems. and thoughts on commercial software that matches checksums of binary files for specific version information or installed default to that particular OS. This would make a great idea for a gnu project. anyone know if anything of this type has been introduced into the community? -DPG . . . .
Current thread:
- RE: strings in backdoor binaries Meritt, Jim (Apr 29)
- <Possible follow-ups>
- RE: strings in backdoor binaries Kenneth Simpson (Apr 30)
