The design and implementation of tripwire
Published 1 January 1994Open access
Gene Kim, Eugene H. Spafford
Citations450
Generate an AI Snapshot to get a quick, structured summary of this paper.
Study Snapshot
ObjectiveStudy objective
MethodsResearch methodology
PopulationPopulation studied
Sample sizeSample sizes
OutcomesStudy outcomes here
ResultsStudy results comes here
LimitationsResearch study limitations comes here
A concise AI-generated summary of the paper will appear here once you click Generate AI Snapshot.
TL;DR
The design and implementation of the Tripwire tool is described, which is tool that aids UNIX system administrators and users in monitoring a designated set of files and directories for any changes, and is highly configurable.
Abstract
At the heart of m.ost computer systems is a file system.. Th.e file system. contains riser data, executable programs, configuration and authorization information, and (usually) the base executable version of the operating system itself. The ability to monitor file systems Jor unauthorized or unexpected charzges gives system administrators valuable data for protecting and main.taining their sys2em.s. However, in environments of many n.etworked h.eterogeneous platforms with different policies un.d software?
Keywords
Computer Science
The C Programming Language
1,770 Citations1978Brian W. Kernighan, Dennis M. Ritchie
Data Encryption Standard
940 Citations2007Dag Arne Osvik, Universitas Bergensis +2 more
The Design of the UNIX Operating System
662 Citations1986Maurice J. Bach
This document discusses the representation of processes in the distributed UNIX system, and some of the mechanisms used to achieve this representation are described.
Lecture notes in computer scienceThe MD4 Message Digest Algorithm
486 Citations2007Ronald L. Rivest
The MD4 message digest algorithm takes an input message of arbitrary length and produces an output 128-bit "fingerprint" or "message digest", in such a way that it is (hopefully) computationally infeasible to produce two messages having the same message digest, or to produce any message having a given prespecified target message digest.
Contemporary Cryptology: The Science of Information Integrity
383 Citations1994Gustavus J. Simmons
This book provides the engineer and scientist with algorithms, protocols, and applications of the science of information integrity, with an emphasis on the cryptographic elements of the subject.
Purdue e-Pubs (Purdue University)The COPS Security Checker System
145 Citations1990Daniel Farmer, Eugene H. Spafford
This paper describes one such tool to detect potential security problems as an aid to system administrators: Cops.
Research Online (University of Wollongong)HAVAL - A one-way hashing algorithm with variable length of output
138 Citations1993Yuliang Zheng
Journal of CryptologyA fast software one-way hash function
134 Citations1990Ralph C. Merkle
This work presents a candidate one-way hash function which appears to have these desirable properties; resistant to cryptographic attack, and fast when implemented in software.
Purdue e-Pubs (Purdue University)Experiences with Tripwire: Using Integrity Checkers for Intrusion Detection
98 Citations1994Gene Kim, Eugene H. Spafford
An overview of Trip wire is described, emphasizing the salient aspects of Tripwire configuration that supports its use at sites employing modern variants of the UNIX operating system, and experiences with how Tripwire has been used in “in the field” are presented.
Medical Entomology and ZoologyPractical UNIX Security
93 Citations1991Simson Garfinkel, Eugene H. Spafford
This volume tells system administrators how to make their UNIX system - either System V or BSD - as secure as it possibly can be without going to trusted system technology.
Managing Projects with Make
61 Citations1993Andrew Oram, Steve Talbot
This book describes all the basic features of make and provides guidelines on meeting the needs of large, modern projects.
The TAMU security package: an ongoing response to internet intruders in an academic environment
36 Citations1993David Safford, Douglas Lee Schales +1 more
Texas AM "tiger," a set of easy to use yet thorough machine checking programs; and "netlog," aset of intrusion detection network monitoring programs.
Medical Entomology and ZoologyUNIX System Security: A Guide for Users and System Administrators
31 Citations1992David A. Curry
The methods an attacker can use to gain access to a UNIX system are described, as well as how to defend against them; in describing the bugs and loopholes used by attackers, it is sometimes necessary to provide information on how they are used.
Infoscience (Ecole Polytechnique Fédérale de Lausanne)C Programmer's Guide to Serial Communications
24 Citations1987Joe Campbell
This new edition provides a new perspective on incorporating serial communications with C and is filled with inside information to bring developers up-to-date on the latest developments in serial communications.
Springer eBooksAnswers to frequently asked questions about today's cryptography
14 Citations1995Lance J. Hoffman
A guide to the selection of anti-virus tools and techniques
11 Citations1992William T. Polk, III Bassham Lawrence E
This guide provides criteria for judging the functionality, practicality, and convenience of anti-virus tools, and furnishes information which readers can use to determine which tools are best suited to target environments.
Purdue e-Pubs (Purdue University System)Writing, supporting, and evaluating tripwire: a publically available security tool
11 Citations1994Gene Kim, Eugene H. Spafford
These unanticipated uses guided the demands of some users, and it is described how to addressed some of these demands without compromising the ability of Tripwire to serve as a useful security tool.