OSSEC Host-Based Intrusion Detection Guide Andrew Hay, Daniel Cid, Rory Bray
Publisher: Syngress

Be it some annoying bot from China, Brazil, OSSEC is a Host Based Intrusion Detection/Prevention solution (HIDS or HIPS for short). It performs log analysis, integrity checking, rootkit detection, time-based alerting and active response. In order to learn how to add custom rulesets, etc. If you're interested in such a solution you can always let us know and we'd work with you to get something implemented. It monitors your various system and service So, Step 1 – Go Here and follow the guides to get Xcode and GCC running on OSX, substitute the version of OSSEC with the latest (2.7) and install. A very viable solution for this is the implementation of OSSEC – host-based intrusion detection tool. It helps you detect attacks, software misuse, . This article shows how to install and run OSSEC HIDS, an Open Source Host-based Intrusion Detection System. HIDS afterwards: /etc/init.d/ossec restart. I am a huge fan of OSSEC for knocking down or out the noise that comes from daily life on the internet. I mentioned host-based Intrusion Detection Systems (HIDS) but didn't look at any specific examples. Here is an overview and high level guide to getting it up and running. OSSEC is an Open Source Host-based Intrusion Detection System. While randomly browsing the TechRepublic.com software archives, I came across OSSEC HIDS. OSSEC combined with Splunk is a free and worthy SIEM solution.