15 May 2006 | 7,673 views

OSSEC HIDS – Open Source Host-based Intrusion System

Check Your Web Security with Acunetix

OSSEC HIDS is an Open Source Host-based Intrusion Detection System. It performs log analysis, integrity checking, rootkit detection, time-based alerting and active response.

It runs on most operating systems, including Linux, OpenBSD, FreeBSD, Solaris and Windows.

This is the first version offering native support for Windows (XP/2000/2003). It includes as well a new set of log analysis rules for sendmail, web logs (Apache and IIS), IDSs and Windows authentication events.

The correlation rules for squid, mail logs, firewall events and authentication systems have been improved, now detecting scans, worms and internal attacks.

The active-responses were also refined, with support to IPFW (FreeBSD) added.

The installation process was re-organized, now including simpler configuration options and
translation on 6 different languages (English, Portuguese, German, Turkish, Polish and Italian).

You can download the Unix and Windows versions here.

Read more Here.

The full changelog is here.

Advertisements



Recent in Countermeasures:
- Egress-Assess – Test Network Egress Data Detection
- Just-Metadata – Gathers & Analyse IP Address Metadata
- Agile Security – How Does It Fit Into A World Of Continuous Delivery

Related Posts:
- Samhain v.2.5.9c – Open Source Host-Based Intrusion Detection System (HIDS)
- Graphical Web Interface for OSSEC WUI AnaLogi v1.1
- Tiger – Unix Security Audit & Intrusion Detection Tool

Most Read in Countermeasures:
  • AJAX: Is your application secure enough? - 119,637 views
  • Password Hasher Firefox Extension - 117,391 views
  • NDR or Backscatter Spam – How Non Delivery Reports Become a Nuisance - 57,625 views


  • Low-cost VPS Hosting

    Comments are closed.