Towards a dynamic file integrity monitor through a security classification

• Main Authors: Abdullah, Zul Hilmi, Udzir, Nur Izura, Mahmod, Ramlan, Samsudin, Khairulmizam
• Format: Article
• Language: English
• Published: The Society of Digital Information and Wireless Communications 2011
• Online Access: http://psasir.upm.edu.my/id/eprint/22523/1/Towards%20a%20dynamic%20file%20integrity%20monitor%20through%20a%20security%20classification.pdf; http://psasir.upm.edu.my/id/eprint/22523/; http://sdiwc.net/digital-library/towards-a-dynamic-file-integrity-monitor-through-a-securityclassification
• Institution: Universiti Putra Malaysia

File is a component of a computer system that has importance value of its own, either in terms of availability, integrity, confidentiality and functionality to a system and application. If unintended changes happen on the related file, it may affect the security of related computer system. File integrity monitor (FIM) tools is widely used to minimize the file security risk. This paper proposed dynamic schedule for FIM. This paper presents a dynamic scheduling for FIM by combining on-line and off-line monitoring based on related files security requirement. Files are divided based on their security level group and integrity monitoring schedule is defined based on related groups. The initial testing result shows that our system is effective in on-line detection of file modification.