LIDS

LIDS (inglizcha: Linux Intrusion Detection System) Linux yadrosi uchun uchinchi tomon tuzatmasi (2.2, 2.4 va 2.6 versiyalari), shuningdek, yadroda majburiy kirishni boshqarishni amalga oshirish orqali Linux xavfsizligini oshiradigan boshqaruv yordamchi dasturlari (lidsadm), darajasi hisoblanadi.

2000-yildan 2009-yilgacha ishlab chiqilgan. SELinux va SMACK majburiy boshqaruv patchlaridan farqli o'laroq, u Linux yadrosining rasmiy tarqatilishiga kiritilmagan.

Fayllar, kataloglar va qurilmalar uchun ACL dan foydalanish imkoniyatidan tashqari, u rootkitlardan foydalanishni murakkablashtiradigan chora-tadbirlar majmuasini o'z ichiga oladi.

2000-yil avgust oyida yamoq mahalliy foydalanuvchiga superuser - CVE-2000-0712^[1] huquqlarini oshirish imkonini beruvchi zaiflikni aniqladi va tuzatdi. 2002-yilda yana bir shunga o'xshash zaiflik aniqlandi.

Yana qarang[tahrir | manbasini tahrirlash]

Majburiy kirishni boshqarish (inglizcha: Mandatory Access Control

Manbalar[tahrir | manbasini tahrirlash]

↑ „Linux Intrusion Detection System Remote Access Vulnerability“ (en). Cisco Security > Latest Threat Information > Multivendor Security Alerts (2002-yil 10-yanvar). 2016-yil 26-yanvarda asl nusxadan arxivlangan. Qaraldi: 2016-yil 19-yanvar.

Adabiyot[tahrir | manbasini tahrirlash]

Denis Kolisnichenko, DIY Linux serveri - Fan va texnologiya, 2002. 704 p. ISBN 5-94387-128-4 - “8.9. Bosqinlarni aniqlash va himoya qilish tizimi” 225—235-betlar
De Bur, Piter va Martin Pels. "Xostga asoslangan hujumlarni aniqlash tizimlari." Amsterdam universiteti (2005). 5-bob “Yadroga asoslangan IDSlar”

Havolalar[tahrir | manbasini tahrirlash]

Rasmiy sayti
LIDS FAQ: The Linux Instrusion Detection/Defense System
Linux Intrusion Detection System FAQ, Sander Klein, v20, 2003
Linux Intrusion Detection/Defense System (LIDS)
Getting Started with the Linux Intrusion Detection System / Linux Journal, Issue 143, Jan 26, 2006
NETWORK SECURITY AND MANAGEMENT.
Securing your system with Linux Intrusion Detection System / Linux Magazine, Issue 106/2009
Brian Hatch, Overview of LIDS, Part One, Part Two, 2001 (перевод, часть 1, часть 2)
David Del Elson, Focus On Linux: Intrusion Detection on Linux, 2000
Xie Huagang, Build a Secure System with LIDS
СЕРГЕЙ ЯРЕМЧУК, LIDS — Системный администратор, 2003 / Выпуск № 4 (5)
НАСТРАИВАЕМ LIDS № 1 / ЖУРНАЛ «ХАКЕР», ДЕК 10, 2002
Денис Колисниченко, Личная неприкосновенность для тукса Архивная копия от 27 января 2016 на Wayback Machine, Хакер, номер #095 2006, стр. 095:114-117
Александр Колядов, Linux-2.4 — шаг к безопасности / «Открытые системы», № 01, 2001 «LIDS»
Аникеев, Гаврилов, Константинов. Безопасность ядра ОС UNIX, 2006
HOW INTRUSION DETECTION CAN IMPROVE SOFTWARE DECOY APPLICATIONS, NAVAL POSTGRADUATE SCHOOL MONTEREY CA, 2003: II.E. LIDS (LINUX INTRUSION-DETECTION SYSTEM), APPENDIX B — LIDS AND INSTALLATION.

[1] „Linux Intrusion Detection System Remote Access Vulnerability“ (en). Cisco Security > Latest Threat Information > Multivendor Security Alerts (2002-yil 10-yanvar). 2016-yil 26-yanvarda asl nusxadan arxivlangan. Qaraldi: 2016-yil 19-yanvar.

[1]