Samhain (software)

This article has multiple issues. Please help or discuss these issues on the talk page. (Learn how and when to remove these template messages) This article needs additional citations for verification. Please help by adding citations to reliable sources. Unsourced material may be challenged and removed. Find sources:  –  ·  ·  · scholar · JSTOR (October 2014) (Learn how and when to remove this template message) The topic of this article may not meet Wikipedia's notability guidelines for products and services. Please help to demonstrate the notability of the topic by citing reliable secondary sources that are independent of the topic and provide significant coverage of it beyond a mere trivial mention. If notability cannot be shown, the article is likely to be merged, redirected, or deleted. Find sources:  –  ·  ·  · scholar · JSTOR (October 2014) (Learn how and when to remove this template message) (Learn how and when to remove this template message)

Samhain is an integrity checker and host intrusion detection system that can be used on single hosts as well as large, UNIX-based networks. It supports central monitoring as well as powerful (and new) stealth features to run undetected in memory, using steganography.

Main features[]

• Complete integrity check
  • uses cryptographic checksums of files to detect modifications,
  • can find rogue SUID executables anywhere on a disk, and
• Centralized monitoring
  • native support for logging to a central server via encrypted and authenticated connections
• Tamper resistance
  • database and configuration files can be signed
  • log file entries and e-mail reports are signed
  • support for stealth operation

See also[]

• Host-based intrusion detection system comparison

References[]

External links[]

• Samhain Homepage

This security software article is a stub. You can help Wikipedia by .

• v
• t