HP-UX Host Intrusion Detection System Release 4.1 Release Notes for HP-UX 11i v1 | HP-UX 11i v2

Table 1-1 HP-UX HIDS Product Compatibility
Supported?Product
YesHP-UX 11i v2
YesHP-UX 11i v1.6
NoHP-UX 11i v1.5
YesHP-UX 11i v1
NoHP-UX 11.0
YesNIS, NIS+
YesOpenView
Not testedServiceGuard
Not testedThird-party Event Monitoring Service (EMS)
YesTrusted Mode operation
NoVirtual Vault
Localization
The HP-UX HIDS software and documentation are not localized in non-English
languages.
Benefits
The HP-UX HIDS intrusion detection product offers the following benefits:
• Automatically monitors each configured host system within the network for
possible signs of unwanted and potentially damaging intrusions.
• Provides continuous surveillance against inappropriate system usage that include
attempting to break into or disrupt the system, modifying system files and
directories, or attempting to spread a virus.
• Continuously examines ongoing activity on a system and seeks out patterns that
suggest security breaches or misuse, because of the exploitation of certain
vulnerabilities:
Vulnerability: Unauthorized File Modification
Monitors: Critical system and application programs and configuration
files
System and application log files
File additions and deletion
Critical files made world writable
Privileged “setuid” programs created
14 Announcement