Security – Tripwire and alternatives

Securityunix

I'm wondering if anybody could guide me here. I have 3 dedicated linux servers and want to install tripwire in order to track changes in the key files/folders in the filesystem

Initial research has shown me that there is no 64-bit version for this (my servers are 64-bit) except the commercial version of tripwire which comes with a heavy cost.

Are there any other good alternatives to tripwire's commercial version that can deliver similar or better functionality (free or not)?

Thanks,

Mark.

Best Answer

The best alternative is AIDE. You should be able to install the 64bit version using your package manager as its in most distros - CentOS has v0.13.1 in the base repository.

As it says:

AIDE (Advanced Intrusion Detection Environment) is a free replacement for Tripwire. It does the same things as the semi-free Tripwire and more.

There are other free replacements available so why build a new one? All the other replacements do not achieve the level of Tripwire. And I wanted a program that would exceed the limitations of Tripwire.

Update from 2019:

The original link above for AIDE appears to be dead. The project lives on in Github at https://aide.github.io/. Interestingly, both AIDE and a currently-maintained version of Tripwire are available on Github now:

Related Topic