{"id":87871,"date":"2014-12-16T16:02:44","date_gmt":"2014-12-16T21:02:44","guid":{"rendered":"http:\/\/www.bu.edu\/tech\/?page_id=87871"},"modified":"2020-06-30T16:02:28","modified_gmt":"2020-06-30T20:02:28","slug":"file-integrity","status":"publish","type":"page","link":"https:\/\/www.bu.edu\/tech\/services\/security\/server\/file-integrity\/","title":{"rendered":"File Integrity Monitoring"},"content":{"rendered":"<div class=\" bu-callout alignright\"><\/p>\n<h3><span class=\"tw icon-mapmarker\"><\/span> Quick Start<\/h3>\n<p><strong>Available to:<\/strong> Faculty, Researchers, Staff, Departments, IT Professionals<\/p>\n<p><strong>Cost:<\/strong> No charge<\/p>\n<ul>\n<li>See <a href=\"#GettingStarted\">Getting Started<\/a>, below.<\/li>\n<\/ul>\n<p><\/div>\n<p>File integrity monitoring software examines the file systems of a computer and provides reports when the contents of the file system change. The software is useful for understanding the changes made by a patch or update and for detecting unauthorized changes to a computer system, such as those made by a virus or malicious hacker. These tools can be used to help ensure compliance with Change Management.<\/p>\n<p>Boston University uses a locally developed tool named \u201cBaseline\u201d to provide the file integrity monitoring capability for our UNIX and Linux systems. Monitored systems run a client application that records information such as file ownership and permissions, along with an MD5 hash of file contents, and transmits this data to the baseline server. The baseline server compares the client\u2019s most recent data to previous data snapshots and reports any differences. This allows the system administrator to have early warning that something has changed and to evaluate if that change is legitimate or if action may be required.<\/p>\n<h2>Benefits<\/h2>\n<p>You are alerted when files change on your system. If you see unexpected or unexplained file changes, you can investigate immediately and resolve the issue quickly if your system has been compromised.<\/p>\n<h2>Key Features<\/h2>\n<ul>\n<li>Offers fast and efficient system integrity checking<\/li>\n<li>Provides an external and secure point of reference for security checks<\/li>\n<li>Runs on the UNIX and Linux operating systems<\/li>\n<li>Helps track compliance with Change Management processes<\/li>\n<\/ul>\n<h2>What to Expect<\/h2>\n<p>This service normally will be available 24 by 7 except for standard change windows, as described in <a href=\"\/tech\/about\/service\/change\/\">IS&amp;T\u2019s standard policies, procedures, and schedules for making changes<\/a><\/p>\n<h2>Requirements<\/h2>\n<p>The Baseline client runs on UNIX and Linux operating systems. If your operating system is not already supported but you can provide us with a development environment, we may be able to build a client for you.<\/p>\n<h2>Getting Started<\/h2>\n<ul>\n<li>Complete information can be found on the <a href=\"https:\/\/baseline-srv.bu.edu\/\">Baseline homepage<\/a>.<\/li>\n<li>Baseline software can be obtained from the <a href=\"https:\/\/baseline-srv.bu.edu\/app\/clients\">download page<\/a>.<\/li>\n<li>If you suspect your system has been compromised, contact the Incident Response Team at <a href=\"mailto:irt@bu.edu\">irt@bu.edu<\/a> or 617-358-1100 for assistance<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>The &#8220;Baseline&#8221; file integrity monitoring system alerts you when changes occur on your system, providing you early notice of possibly unauthorized changes&#8230;.<\/p>\n","protected":false},"author":1356,"featured_media":0,"parent":87830,"menu_order":1,"comment_status":"closed","ping_status":"closed","template":"service.php","meta":[],"_links":{"self":[{"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages\/87871"}],"collection":[{"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/users\/1356"}],"replies":[{"embeddable":true,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/comments?post=87871"}],"version-history":[{"count":10,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages\/87871\/revisions"}],"predecessor-version":[{"id":128740,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages\/87871\/revisions\/128740"}],"up":[{"embeddable":true,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages\/87830"}],"wp:attachment":[{"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/media?parent=87871"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}