본문 바로가기

서버구축208

728x90
ModSecurity v2.7.6 Release ModSecurity v2.7.6 Release와 관련하여 Continuous Integration(CI) 플랫폼(BuildBot)의 적용 및 활용과 관련하여 설명드리겠습니다.1. ModSecurity v2.7.6 개요ModSecurity v2.7.6 버전은 웹 애플리케이션 방화벽(Web Application Firewall, WAF)인 ModSecurity의 업데이트 버전으로, 주로 보안 규칙 적용 및 웹 서버와의 호환성 향상, 성능 개선, 버그 수정 등 다양한 이슈를 다룹니다.2. Continuous Integration(CI) 플랫폼(BuildBot)의 도입 배경과 목적CI 플랫폼인 BuildBot의 도입 배경은 다음과 같습니다.ModSecurity는 여러 웹 서버(Apache, IIS, Nginx.. 2013. 12. 19.
OSSEC Log Management with Elasticsearch Log Management System ArchitectureThe OSSEC log management system I’ll discuss here relies on three open source technologies, in addition to OSSEC:Logstash – Parses and stores syslog data to ElasticsearchElasticsearch - General purpose indexing and data storage systemKibana – User interface that comes with ElasticSearchLogstash is configured to receive OSSEC syslog output then parse it and forwa.. 2013. 11. 23.
OSSEC Server, Client, Web UI and Analogi Dashboard Installation tutorial OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response. It runs on most operating systems, including Linux, MacOS, Solaris, HP-UX, AIX and Windows. It also includes agentless monitoring for use with for example Cisco, HP or Juniper hardware.This tutorial covers.. 2013. 11. 12.
Configuring OSSEC with MySQL and Analogi I have been using OSSEC for a while now but I always used only plain text logs. While this is not bad, it does not scale really well. I started looking into a way to do it right(tm). I knew OSSEC was compatible with MySQL, and since 2.7 has been released, it gave me an excuse to play with it again.You will need to enable MySQL in OSSEC (not enabled by default), grab the source then do the follow.. 2013. 11. 5.
ClamAV 0.98 has been released! ClamAV 0.98 includes many new features, across many different components of ClamAV. There are new scanning options, extensions to the libclamav API, support for additional filetypes, and internal upgrades. - Signature improvements: New signature targets have been added for PDF files, Flash files and Java class files. (NOTE: Java archive files (JAR) are not part of the Java target.) Hash signatur.. 2013. 9. 30.
728x90
728x90