What are the benefits and drawbacks of utilizing a file integrity checker like Tripwire? This is a file that tells the administrator of file modifications and notifies the administrator of new files. Consider which files are seldom edited, which files are updated on a regular basis, and which files are updated frequently. Discuss how this affects the tool's settings, particularly in terms of which areas of the file system are scanned and how much work the administrator has to do monitoring its replies

What are the benefits and drawbacks of utilizing a file integrity checker like Tripwire? This is a file that tells the administrator of file modifications and notifies the administrator of new files. Consider which files are seldom edited, which files are updated on a regular basis, and which files are updated frequently. Discuss how this affects the tool's settings, particularly in terms of which areas of the file system are scanned and how much work the administrator has to do monitoring its replies

Systems Architecture

7th Edition

ISBN:9781305080195

Author:Stephen D. Burd

Publisher:Stephen D. Burd

Chapter11: Operating Systems

Section: Chapter Questions

Problem 1RP

See similar textbooks

Similar questions

What are the advantages and disadvantages of using a file integrity checker such as Tripwire? This file informs the administrator of file alterations and alerts the administrator of newly created files. Consider which files are seldom altered, which files are regularly updated, and which files are often updated. Discuss how this impacts the tool's settings, specifically in terms of which portions of the file system are searched and how much effort the administrator must expend watching its responses.
What are the pros and cons of using a file integrity checking tool such as Tripwire? This is a file which notifies the administrator of and changes to files on a regular basis. Consider issues such as which files are rarely modified, which files may change on a regular basis, and which may change often. Discuss how this influences the configuration of the tool, especially as to which parts of the file system are scanned, and how much work monitoring its responses imposes on the administrator.
In light of all that has been discussed, what can we deduce about the File Integrity Monitoring Program?
What are the pros and cons of Tripwire's file integrity checker? This file alerts the administrator of file changes and new files. Think about which files are seldom modified, regularly updated, and frequently updated. Explain how this impacts the tool's settings, notably which portions of the file system are examined and how much work the administrator needs to perform monitoring its answers.
Think about a scenario where a threat actor changes a file's extension to prevent it from being examined. What steps will you take to ensure a comprehensive investigation can be done? What steps will you take if you find a formatted hard disk, too? How will the data be stored using it? What does the term "slack space" mean?
Joe Green, a system administrator for a large corporation, is installing a new software package on Chuck Dennis’ personal computer. The company has not authorized Joe to read the employees’ e-mail, Web logs, or personal files. However, in the course of installing the software, he accidentally comes across directories containing files with suspicious-looking names. He opens a few files and discovers they contain child pornography. Joe believes possessing such images is unethical for their profession. What should he do? Acme Corporation licenses a sophisticated software package to many private and government agencies. Kyla is one of Acme's employees who works in the support organization. She mostly provides phone support but also teaches an on-site class from time to time. In fact, she created many of the instructional materials used in these classes. One day Kyla gets a call from Maria, who works for a government agency that uses Acme's software package. Maria offers to pay Kyla Php…
A Prof believes that all the effort spent on access control matrices and access control lists is a waste of time. He believes that all file access permissions for every file should be restricted to the owner of that file, period. Describe five unique scenarios where he is wrong, that is, where users other than a file’s owner need some kind of allowed access privileges.
What is the ultimate conclusion on the File Integrity Monitoring Program?
What's the Problem Statement and Purpose of the File Integrity Monitoring program?
Given the importance of keeping malware at bay, why would anybody want to make file extensions visible?
What is the conclusion on the File Integrity Monitoring Program?
You need to check what modification-, change-, and access time a file has, how can you check this? Discuss the difference between them, and what they actually mean. What other meta-information can be found about a file?