Host Based Security System: Difference between revisions

Revision as of 19:26, 9 April 2023

Revision as of 12:01, 11 October 2023

Line 18:

== HBSS components ==

Throughout its lifetime, [https://99web.org/host-based-security-system/ HBSS] has undergone several major baseline updates as well as minor maintenance releases. The first major release of '''HBSS''' wasis knownbased as Baseline 1.0 and contained theon McAfee ePolicy orchestrator engine, HIPS,Inc's [[software'''ePolicy''' compliance profiler]]Orchestrator (SCPePO), [[rogue system detection]] (RSD), [[asset baseline manager]] (ABM), and assetsother software.McAfee point Asproduct newsecurity releasesapplications weresuch introduced,as theseHost softwareIntrusion productsPrevention haveSystem evolved,(HIPS) had. newThe productssystem added,comprises andseveral in some casesmodules/components, been completely replaced for different products.including:

'''Host Intrusion Prevention System (HIPS):''' A module that provides intrusion detection and prevention capabilities to protect against known and unknown threats .

'''Policy Auditor (PA):''' A module that enables administrators to audit and enforce compliance with security policies across the enterprise .

'''Assets Baseline Module (ABM):''' A module that enables administrators to establish a baseline of authorized software and configuration settings for each host ¹.

'''Rogue System Detection (RSD):''' A module that detects unauthorized devices on the network and prevents them from accessing sensitive data .

'''Device Control Module (DCM):''' A module that enables administrators to control access to peripheral devices such as USB drives, CD/DVD drives, and printers .

'''Asset Publishing Service (APS):''' A module that enables administrators to publish asset information to other HBSS servers in the enterprise .

Recently, the Defense Information Systems Agency (DISA) has rebranded HBSS into a new suite called Endpoint Security Solutions (ESS), which adds new capabilities on top of the existing HBSS software . ESS is a multi-point product designed to meet known intrusion points, discover gaps, and reduce the likelihood of unauthorized device and network access .

=== HBSS Baseline 4.5 MR2 components ===