Comparação de ferramentas para verificação de integridade de arquivos

• Autor(a) principal: Santos, Michel Henrique Aquino
• Data de Publicação: 2012
• Tipo de documento: Trabalho de conclusão de curso
• Idioma: por
• Título da fonte: Repositório Institucional da UFLA
• Texto Completo: http://repositorio.ufla.br/jspui/handle/1/31321
• topic: Segurança computacional; Integridade de arquivos; Ferramentas de verificação de integridade de arquivos; Intrusion detection system; Computer security; File integrity; Tools for checking integrity of files

The internet is becoming the main way of communication, thus the number of attacks in computational systems grows more and more. Thereby, it is necessary to protect the systems and its data. It is common the first action of an attacker to be the modification or replacement of systems’ files, with the mind in remove the invasion’s traces or facilitate future invasions. The intrusion detection systems are a sub-class of IDS (Intrusion Detection System) and has the function of monitoring the computational system, detecting modifications in checked files and offering to the system administrator the possibility of restore the system if some change occurs. The objective of this study is analyse and compare intrusion detection systems like Tripwire, AIDE, OSSEC and Samhain, helping the system’s admnistrator choose the most appropriate tool for his enviroment.