HP-UX Host Intrusion Detection System Release 4.1 Release Notes for HP-UX 11i v1 | HP-UX 11i v2 | HP-UX 11i v3

1 Announcement
The HP-UX Host Intrusion Detection System Release 4.1 Release Notes describes major new
features, enhancements, fixes, limitations, and known issues for Host Intrusion Detection
System (HIDS) Release 4.1.
What is HP-UX HIDS
HP-UX HIDS is a host-based HP-UX security product for HP computers running HP-UX
11i. HP-UX HIDS enables security administrators to proactively monitor, detect, and
respond to attacks targeted at specific hosts. Many types of attacks can bypass
network-based detection systems. HP-UX HIDS monitors these bypassed attacks and
complements the existing network-based security mechanisms, bolstering enterprise
security.
HP-UX HIDS seeks patterns that might suggest security breaches or misuse by
examining information about system activity from a variety of data sources. It detects
illicit activities that include attempting to break into or disrupt the system, modifying
system files and directories, or attempting to spread a virus. When HP-UX HIDS detects
an intrusion attempt, it issues an alert to the administrative interface, where users can
immediately investigate the situation, and take necessary action against the intrusion.
In addition, users can customize a local response to an alert as described in Appendix
B, Response Programs in the Host Intrusion Detection System Administrator’s Guide.
HP-UX HIDS is particularly useful for enterprise environments in which centralized
management tools control networks of heterogeneous systems. These environments
include Web servers, transaction processors, application servers, and database systems.
Compatibility with Previous Releases
HP-UX HIDS Release 4.1 software is backward compatible with Release 4.0, Release
3.1, and Release 3.0 (collectively referred to as 3.x). However, schedules created with
3.x and 4.0 versions of HIDS must be migrated to HIDS Release 4.1. For more
information about migration, see “Migrating Schedules from Older Versions of HIDS”
(page 31)
HP recommends that users upgrade all systems to HIDS Release 4.1.
What is HP-UX HIDS 13