News for hackers. Stuff that matters.

A comment on Ask HN: How do you handle server security/intrusion monitoring?. Parent comment

Re:Ask HN: How do you handle server security/intrusion monit... by ericd on Sunday November 22, 2009 @05:22PM (#956303)
Good tip on the pub/priv key auth for ssh. Also on tripwire. Thanks!

Custom logs generated by your own app for things like login attempts, etc, are definitely useful for detecting issues. I was referring more to things like apache connection logs, and other logs generated by other programs - I would imagine that there's a huge range of things to look for.

[ Parent | on HN ]
Re:Ask HN: How do you handle server security/intrusion monit... by Sanguinez on Sunday November 22, 2009 @06:31PM (#956414)
When I say logs, I mean all sort of logs (network, system, app...). So that include auth logs, apache logs and so on.
[ Parent | on HN ]