OpenBSD Gains "Fuzzy" User Profiling IDS
NaveWeiss writes "According to the OpenBSD Journal, major work has been done on an innovative new OpenBSD feature termed 'fuzzy user profile' intrusion detection system' - or 'fupids.' According to Steffen Wendzel, the code 'creates profiles for every user who does an execve() syscall on obsd systems.'"
Another good move along these lines, I think, might be to mount all partitions as noexec, and mount all the partitions with executable content as read-only...
o/~ Join us now and share the software