[ILUG] AIDE

[Brian Foster]

  | Date: Mon, 8 Mar 2004 15:39:42 +0000
  | From: "Conall O'Brien" <conall at conall.net>
  | 
  | On Mon, Mar 08, 2004 at 01:34:02PM GMT, Kevin Philp
  | <kevin at cybercolloids.net> incoherently babbled:
  |  > I am just setting upan intrusion detection system.
  |  > I have used Tripwire in the past [ ... ].
  |  > However I was thinking about using AIDE [ ... ].
  | 
  | I don't have much experience with any alternatives,
  | but I've been using AIDE for a few months now.
  | It's quite good.  [ ... ]
  | The Debian Team swear by it after their boxes were
  | compromised in the leadup to the release of 2.4.23.

 why _a_ (as in one) system?
 in some cases, would not N, N > 1, possibly be better?
 clearly depends, at least in part, what each does;
 but a mixture of overlapping (to verify results) and
 orthogonal (to catch holes in the other) approaches
 _may_ be a winner?
cheers!
    -blf-
--
«How many surrealists does it take to    |  Brian Foster      Montpellier,
 change a lightbulb?  Three.  One calms  |  blf at utvinternet.ie      France
 the warthog, and two fill the bathtub   |    Stop E$$o (ExxonMobile)!
 with brightly-colored machine tools.»   |        http://www.stopesso.com