Tiger is a versatile security tool that serves as both a security audit and intrusion detection system, making it an effective solution for identifying and mitigating cyber threats.
Tiger is a highly effective security tool that can function as both a security audit and intrusion detection system. As a project that supports multiple UNIX platforms, it is completely free and provided under a GPL license. What sets this tool apart from the others is the fact that Tiger needs only POSIX tools and is written entirely in shell language.
With its modular design that is easy to expand, Tiger has some interesting features that merit its resurrection. It can be used as an audit tool as well as a host intrusion detection system tool. Most free software intrusion detection tools currently focus on network IDS (with Snort), to the kernel (LIDS, or SNARE for Linux and Systrace for OpenBSD), file integrity checkers (aide, integrit samhain, tripwire...), and log checkers.
Tiger compliments these tools by providing a framework in which all of them can work together. Unlike log checkers, it is not focused on integrity analysis. Instead, it checks the system configuration and status. For a full description of checks implemented in Tiger, you can read the manpage. An excellent example of what Tiger can do is check_findelete, a module that can determine which network servers running on a system are using deleted files.
Free software Linux/*BSD distributions come with a myriad of security tools to do local security checks such as Debian's checksecurity, Mandrake's msec, OpenBSD's /etc/security, and SUSE's Seccheck. Even though they perform similar checks, they have suffered from fragmentation. Tiger is being developed to substitute them at some point in the future. For a list of system security checks that Tiger provides that others do not, you can read this (short) comparison.
With its modular design that is easy to expand, Tiger has some interesting features that merit its resurrection. It can be used as an audit tool as well as a host intrusion detection system tool. Most free software intrusion detection tools currently focus on network IDS (with Snort), to the kernel (LIDS, or SNARE for Linux and Systrace for OpenBSD), file integrity checkers (aide, integrit samhain, tripwire...), and log checkers.
Tiger compliments these tools by providing a framework in which all of them can work together. Unlike log checkers, it is not focused on integrity analysis. Instead, it checks the system configuration and status. For a full description of checks implemented in Tiger, you can read the manpage. An excellent example of what Tiger can do is check_findelete, a module that can determine which network servers running on a system are using deleted files.
Free software Linux/*BSD distributions come with a myriad of security tools to do local security checks such as Debian's checksecurity, Mandrake's msec, OpenBSD's /etc/security, and SUSE's Seccheck. Even though they perform similar checks, they have suffered from fragmentation. Tiger is being developed to substitute them at some point in the future. For a list of system security checks that Tiger provides that others do not, you can read this (short) comparison.
What's New
Version 3.2.3: N/A