软件包：samhain（4.1.4-4）

Data integrity and host intrusion alert system

Samhain is an integrity checker and host intrusion detection system that can be used on single hosts as well as large, UNIX-based networks. It supports central monitoring as well as powerful (and new) stealth features to run undetected on memory using steganography.

Main features

    * Complete integrity check
           uses cryptographic checksums of files to detect
           modifications,
           can find rogue SUID executables anywhere on disk, and
    * Centralized monitoring
           native support for logging to a central server via encrypted
           and authenticated connections
    * Tamper resistance
           database and configuration files can be signed
           logfile entries and e-mail reports are signed
           support for stealth operation

标签: 系统管理: 监看, 用户接口: 命令行, interface::daemon, role::program, 范围: 实用程序, 安全性: Intrusion Detection, security::integrity, use::monitor

本页其他语言版本如下（如何设置默认文档语言）：