Very Computer

I had a question as to which software would be the better to use?  ISS I
have gotten to run rather easily but as for COPS I have trouble
installing it and setting it up.  Is it even worth going through the
trouble to do it?

Definitely. ISS just tries a number of common tricks and attacks
on the system(s). COPS has much more comprehensive security scanning
features, including better password checking, checking of anonymous ftp
setup, maintaining a CRC list of files, kuang analysis, etc, etc.
If I had to pick one, it would be COPS. Since you don't, use both.

 - Alan

: >I had a question as to which software would be the better to use?  ISS I
: >have gotten to run rather easily but as for COPS I have trouble
: >installing it and setting it up.  Is it even worth going through the
: >trouble to do it?

: Definitely. ISS just tries a number of common tricks and attacks
: on the system(s). COPS has much more comprehensive security scanning
: features, including better password checking, checking of anonymous ftp
: setup, maintaining a CRC list of files, kuang analysis, etc, etc.
: If I had to pick one, it would be COPS. Since you don't, use both.

They are different tools. COPS checks internal security of a single host,
while ISS checks the external security of all your machines on the network.
ISS is available on aql.gatech.edu /pub/security/iss

--
Christopher William Klaus       Voice: (404)441-2531. Fax: (404)441-2431
Internet Security Systems, Inc.         Computer Security Consulting
2000 Miller Court West, Norcross, GA 30071

Quote:> I had a question as to which software would be the better to use?  ISS I
> have gotten to run rather easily but as for COPS I have troub
> installing it and setting it up.  Is it even worth going through t
> trouble to do it?

What exactly is ISS ??

BTW I converted COPS to run well on an SVR4 UNIX (NCR actually) and
even created a pkg in pkgadd format ... It did take some time and
path conversions etc ....

Thanks,

Alex J. Chircop
Technical Analyst - Operating Systems

Information Systems Division,
Management Systems Unit Ltd.,
Malta