GEN006480 - The system must have a host-based intrusion detection tool installed.

Information

Adding host-based intrusion detection tools can provide the capability to automatically take actions in response to malicious behavior, which can provide additional agility in reacting to network threats. These tools also often include a reporting capability to provide network awareness of system, which may not otherwise exist in an organization's systems management regime.

Solution

Install and enable the latest McAfee HIPS package, available from Cybercom.

If the system does not support the McAfee HIPS package, install and enable a supported intrusion detection system application and document its use with the Authorizing Official.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_5_V2R1_STIG.zip

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-2(2), 800-53|SI-4(1), CAT|II, CCI|CCI-001233, CCI|CCI-001259, Rule-ID|SV-218665r603259_rule, STIG-ID|GEN006480, STIG-Legacy|SV-63733, STIG-Legacy|V-782, Vuln-ID|V-218665

Plugin: Unix

Control ID: a8122fc73f120696b516e67c8484d4d98ebbfe62f43302a6abfef745080092a5