David Spark here reporting for Tripwire at the 2010 RSA Conference in San Francisco.

I spoke with Oliver Van Assche, Team Leader of Security Operations of BWIN Interactive Entertainment AG. They’ve been customers with Tripwire for three years. They use Tripwire for policy compliance across their PCI environment, plus file integrity monitoring (FIM) to detect changes within their production environment.

I asked him how does FIM affect their production process and he admitted that it helps catch human error. People often make the mistake of launching the wrong version of the software. Tripwire helps them stay in check, and catches their mistakes.

Check out more of Tripwire’s coverage from the 2010 RSA Conference in San Francisco.

Categories Regulatory Compliance, ,

Tags , , , , , , ,

SANS Endpoint Security Maturity Model
  • http://www.techopsguys.com/ nate

    I was going to ask how tripwire fixes human mistakes then I read further and saw that it doesn't, it just helps detect them. For me I haven't used file integrity checking for a few years now but do use another tool called cfengine which not only detects but will repair human error(for things that it is configured to manage). Files under management are checked hourly and automatically set to a known state if there are any changes. It's not a security tool like tripwire, it's more of a general management tool. I suppose it could be called a policy management tool as well, it handles software installations, application configuration(wherever possible), OS level configuration(including passwd/shadow and SSH keys) and automatic restarts of downed services etc. It makes building new systems a snap.It's not a simple app to learn though, my configuration excluding blank lines is almost 17,000 lines at this point, and is the result of nearly 5 years of refinement at 3 different companies.

  • Pingback: Summary of Tripwire’s coverage at 2010 RSA Conference()

David Spark

David Spark has contributed 156 posts to The State of Security.

View all posts by David Spark >