Introduction

Host integrity monitoring intersects many areas of security, including intrusion detection, change management, security administration, and intrusion prevention. To effectively monitor the integrity of your hosts, you must understand them and how they interact with each other. This appendix provides various resources and organizations related to host integrity and computer security in general.

Online Documentation

Osiris
http://hostintegrity.com/osiris/docs/documentation.html

Samhain
www.la-samhna.de/samhain/manual/

Online Publications

Dunston, Duane. Mass Deploying Osiris
www.linuxsecurity.com/content/view/101884/49/

Lesko, Matt. Host-based Intrusion Detection with Samhain
www.newsforge.com/article.pl?sid=03/07/29/1727249

Wichmann, Rainer. A Comparison of Host/File Integrity Checkers
www.la-samhna.de/library/scanners.html

Wichmann, Rainer. PGP Signatures on Open Source Software and why You Should Check Them
www.la-samhna.de/library/PGPSignatures.html

Wotring, Brian. Host Integrity Monitoring: Best Practices for Deployment
www.securityfocus.com/infocus/1771

Books

Proctor, Paul E. Practical Intrusion Detection Handbook. Prentice Hall, 2001

Rash, Michael, Angela Orebaugh, Graham Clark, Becky Pinkard, and Jake Babbin. Intrusion Detection and Active Response: Deploying Network and Host IPS. Syngress, 2005

Northcutt, Stephen and Judy Novak. Network Intrusion Detection, New Riders, 2002

Beale, Jay, Brian Caswell et al. Snort 2.1 Intrusion Detection, Second Edition. Syngress, 2004

Anderson, Ross. Security Engineering: A Guide to Building Dependable Distributed Systems. Wiley, 2001

Viega, John, Matt Messier, and Pravir Chandra. Network Security with OpenSSL. O Reilly and Associates, 2002

Korff, Yanek, Paco Hope, and Bruce Potter. Mastering FreeBSD and OpenBSD Security. O Reilly and Associates, 2005

Hoglund, Greg and Gary McGraw. Exploiting Software How to Break Code. Addison Wesley, 2004

Krusse, Warren G. II, and Jay G. Heiser. Computer Forensics Incident Response...