HP-UX 11i Version 2 May 2005 Release Notes

Security
HP-UX Host Intrusion Detection System
Chapter 8
153
Performance
There are no known performance issues.
Documentation
For further information, refer to the following manpages:
• audit (5)
• audusr (1M)
• getauduser (3)
• setauduser (3)
• pam_hpsec (5)
• pam.conf (4)
See the following elsewhere in this document:
• “Software Pack (Optional HP-UX 11i v2 Core Enhancements)” on page 28
• “HP-UX 11i Security Containment” on page 150
• “HP-UX Standard Mode Security Extensions” on page 159
Also refer to the HP-UX Standard Mode Security Extensions Release Notes at
http://docs.hp.com.
Obsolescence
Not applicable.
HP-UX Host Intrusion Detection System
HP-UX Host Intrusion Detection System (HIDS) Release 3.1 is a host-based HP-UX
security product for HP computers running HP-UX 11i. HP-UX HIDS Release 3.1
enables security administrators to proactively monitor, detect, and respond to attacks
targeted at specific hosts. Since there are many types of attacks that can bypass
network-based detection systems, HP-UX HIDS Release 3.1 complements existing
network-based security mechanisms, bolstering enterprise security.
Summary of Change
Since the September 2004 release of HP-UX 11i v2, HIDS has been updated to version
3.1. Changes include the following:
• HIDS Release 3.0 (initially delivered via the Web at http://software.hp.com):
— Performance improvement: Significant reduction in CPU consumption and
better performance throughput by the HP-UX HIDS Release 3.0 idscor
correlator process.