Re: host-based ips ?

["SB CH" <chulmin2 () hotmail com>]

Good comment.

and I think Grsecurity(http://www.grsecurity.net/) is good too, for linux.

additionally, I have a question what's the difference between SeucreOS and 
Host based IPS and LIDS and Grsecurity?


Thanks.


From: Huagang Xie <xie () www lids org>
To: focus-ids () securityfocus com
Subject: Re: host-based ips ?
Date: Thu, 17 Apr 2003 22:58:03 -0700

For linux, LIDS(Linux Intrusion Detection System, www.lids.org), an open 
source GPLed kernel enhancement software,  can prevent file system from 
being modified, network setting from being changed, and even prevent worm 
spreading and more.  In this case, LIDS could be treated as a Host base 
IPS..:-)

Huagang


On Thu, Apr 17, 2003 at 09:32:47PM +0900, Quynh Nguyen Anh wrote:
> hello,
>
> there are some nips (network based ips), but i never ever heard about
> host based ips. any body have known about this?
>
> thanh you a lot.
> --
> Quynh
>
>
> 
------------------------------------------------------------------------------

> INTRUSION PREVENTION: READY FOR PRIME TIME?
>
> IntruShield now offers unprecedented Intrusion IntelligenceTM 
capabilities
> - including intrusion identification, relevancy, direction, impact and
> analysis - enabling a path to prevention.
> Download the latest white paper "Intrusion Prevention: Myths, 
Challenges,
> and Requirements" at: http://www.securityfocus.com/IntruVert-focus-ids

--
LIDS secure linux kernel
http://www.lids.org/
1024D/B6EFB028          4731 2BF7 7735 4DBD 3771  4E24 B53B B60A B6EF B028
<< attach3 >>


_________________________________________________________________
MSN Messenger를 통해 온라인상에 있는 친구와 대화를 나누세요.   
http://messenger.msn.co.kr  


------------------------------------------------------------------------------
INTRUSION PREVENTION: READY FOR PRIME TIME?

IntruShield now offers unprecedented Intrusion IntelligenceTM capabilities - 
including intrusion identification, relevancy, direction, impact and analysis - enabling a path to prevention. 

Download the latest white paper "Intrusion Prevention: Myths, Challenges, and Requirements" at: 
http://www.securityfocus.com/IntruVert-focus-ids