Mobility-Enhanced File Integrity Analyzer For Networked Environments Export

@inproceedings{c_wang_demara_wmsci_05, abstract = {The ability to monitor computer file systems for unauthorized changes is a powerful administrative tool. Ideally this task could be performed remotely under the direction of the administrator to allow on-demand checking, and use of tailorable reporting and exception policies targeted to adjustable groups of network elements. This paper introduces M-FICA, a Mobile File Integrity and Consistency Analyzer as a prototype to achieve this capability using mobile agents. The M-FICA file tampering detection approach uses MD5 message digests to identify file changes. Two agent types, Initiator and Examiner, are used to perform file integrity tasks. An Initiator travels to client systems, computes a file digest, then stores those digests in a database file located on write-once media. An Examiner agent computes a new digest to compare with the original digests in the database file. Changes in digest values indicate that the file contents have been modified. The design and evaluation results for a prototype developed in the Concordia agent framework are described.}, address = {Orlando, Florida, U.S.A.}, author = {Wang, G. and Demara, R. F. and Rocke, A. J.}, citeulike-article-id = {134267}, citeulike-linkout-0 = {http://cal.ucf.edu/conf/c_wang_demara_wmsci_05.pdf}, day = {10 - 13}, journal = {9th World Multi-Conference on Systemics, Cybernetics and Informatics}, keywords = {demara}, month = {July}, posted-at = {2005-03-21 15:26:18}, priority = {2}, title = {Mobility-Enhanced File Integrity Analyzer For Networked Environments}, url = {http://cal.ucf.edu/conf/c_wang_demara_wmsci_05.pdf}, year = {2005} }

TY - CONF ID - c_wang_demara_wmsci_05 L3 - citeulike-article-id:134267 N2 - The ability to monitor computer file systems for unauthorized changes is a powerful administrative tool. Ideally this task could be performed remotely under the direction of the administrator to allow on-demand checking, and use of tailorable reporting and exception policies targeted to adjustable groups of network elements. This paper introduces M-FICA, a Mobile File Integrity and Consistency Analyzer as a prototype to achieve this capability using mobile agents. The M-FICA file tampering detection approach uses MD5 message digests to identify file changes. Two agent types, Initiator and Examiner, are used to perform file integrity tasks. An Initiator travels to client systems, computes a file digest, then stores those digests in a database file located on write-once media. An Examiner agent computes a new digest to compare with the original digests in the database file. Changes in digest values indicate that the file contents have been modified. The design and evaluation results for a prototype developed in the Concordia agent framework are described. JF - 9th World Multi-Conference on Systemics, Cybernetics and Informatics AD - Orlando, Florida, U.S.A. TI - Mobility-Enhanced File Integrity Analyzer For Networked Environments KW - demara AU - Wang, G AU - Demara, RF AU - Rocke, AJ PY - 2005/07/10 - 13/ UR - http://cal.ucf.edu/conf/c_wang_demara_wmsci_05.pdf ER -