Host Based Intrusion Detection

Wed Oct 22 23:19:01 PDT 2003

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I am needing to deploy a host based intrusion detection system as recommended by a security audit team. I know of AIDE and Tripwire.  Is there any other solutions?  What are the experiences that people have had with any of these systems.  Any system worth anything would need to detect automatically an unauthorized change and send an alert.  The platforms this would need to support is RedHat, Solaris, and W2K server.

Thanks in advance,

Ron Leedy

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0

iQA/AwUBP5dy04iqj/VUJphgEQIGUwCgudZC+FdApSVTcc3B60un4btYm+oAnR8P
E2KF45s4n/JdoBaqH9hfYZzh
=WyKw
-----END PGP SIGNATURE-----

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.525 / Virus Database: 322 - Release Date: 10/9/2003