| |||||||||||||
OSSEC for host-based intrusion detectionOSSEC for host-based intrusion detectionPosted May 6, 2010 20:07 UTC (Thu) by spender (subscriber, #23067)In reply to: OSSEC for host-based intrusion detection by drag Parent article: OSSEC for host-based intrusion detection
Speaking of TPM and its 'tamper-proof'ness, the enlightenment framework I developed disables all versons of IMA, a TPM-enabled kernel level Tripwire of sorts, in such a way that any remote monitoring host will not notice anything suspicious.
'Tamper-proof' is highly dependent upon implementation.
-Brad
(Log in to post comments)
|
|||||||||||||