How are you protecting your industrial assets from cyber threats? Industrial control system (ICS) environments pose unique security challenges that can quickly drain your resources if you’re faced with time consuming manual asset inventory and a lack of cohesion between your organization’s IT and OT strategies. Many security solutions can disrupt ICS or SCADA equipment as well, meaning you need a...

Tripwire offers mature, refined integration frameworks. With them, you can combine Tripwire Enterprise’s rich change, configuration and compliance information with data from additional security solutions, like SIEMs, change management (CM) systems, change management databases (CMDBs), and governance, risk and compliance (GRC) systems.

When security teams gradually optimize their security workflows and move from manual to automated processes, the topic of IT service management (ITSM) integration with security tools such as Tripwire® Enterprise is a natural next step. Your teams must be in sync about how information is entered into and managed by your systems in order to operate successfully, and it’s critical to have processes...

Most enterprises experience massive amounts of system configuration change every day, and experience has shown that an average of 50% of system changes are simply additions, changes, or deletions considered “business as usual” (BAU) for your organization. The vast majority of these changes can be quickly accepted and promoted as “known good.” Tripwire® Dynamic Software Reconciliation (DSR)...

Many security and operations teams leverage security information and event management ( SIEM) solutions to track the state of their environment and alert on security and operational issues. While this may be an effective way to gain that single view of your environment, objective compliance results and file integrity data such as who made the change, exact before and after differences in files or...

Federal security professionals are tasked with protecting agencies against attacks, detecting threats, identifying vulnerabilities, and hardening configurations while simultaneously demonstrating that critical systems are in compliance. Each of these complex processes must be executed with limited time and resources. In an ideal environment, an agency’s security solutions would enable personnel to...

Changes to configurations, files and file attributes throughout the IT infrastructure are just part of everyday life in today’s enterprise organizations. But hidden within the large volume of daily changes are the few that can impact file or configuration integrity. These include unexpected changes to attributes, permissions and content, or changes that cause a configuration’s values, ranges and...

To enhance your Federal Information Security Management Act (FISMA) compliance grade, you must implement one of the most challenging controls in NIST SP 800-53: the Controls, Family: System Information & Integrity (SI) 7 requirement. SI-7 states that organizations must employ automated and centrally managed integrity verification tools to detect unauthorized change. This level of visibility can be...

When it comes to compliance and security, efficient patch management is a critical capability. In order to be effective, patch management requires a closed-loop process for approval and reconciliation, especially in highly sensitive operational environments. Whether you are evaluating patches for security or operational purposes, Tripwire and FoxGuard integrate seamlessly for an innovative...

The Host based Security System (HBSS) is a suite of products that the Department of Defense (DoD) mandated for use within the DoD Enterprise Network in early 2007. The intent was that DoD organizations would use it to monitor, detect, and prevent successful attacks against the department’s systems and networks. On the surface, the concept of HBSS is a solid one: a consistent, single IT security...