Pci Firewire
 |
| Lot of 50 NEW BUSlink 3 Port 1394 FireWire PCI Card | |
 |
$399.99 End Date: Tuesday May-22-2012 11:58:49 PDT Buy It Now for only: $399.99 Buy It Now | Add to watch list |
| 5 Bay Enclosure SATA eSATA+PCI X Card 4 IDE FIREWIRE | |
 |
$328.96 End Date: Saturday Jun-2-2012 20:16:54 PDT Buy It Now for only: $328.96 Buy It Now | Add to watch list |
| E Mu 1212m PCi Card Firewire Version Plus 11 SONY Acid Loop Sample CDs | |
 |
$249.99 End Date: Friday Jun-15-2012 17:13:34 PDT Buy It Now for only: $249.99 Buy It Now | Add to watch list |
| HP PCI FIREWIRE CARD 300MB S I394U | |
 |
$245.00 End Date: Wednesday May-23-2012 8:06:36 PDT Buy It Now for only: $245.00 Buy It Now | Add to watch list |
| HIGH QUALITY 5 Port USB 20 Firewire Combo PCI 2x 6 to 6 Pin One 4Pin Cable | |
 |
$229.99 End Date: Saturday May-26-2012 2:18:31 PDT Buy It Now for only: $229.99 Buy It Now | Add to watch list |
| HIGH QUALITY 8 Port USB 2 Firewire Combo PCI Card + 6 to 4Pin Cable | |
 |
$224.30 End Date: Saturday May-26-2012 2:43:05 PDT Buy It Now for only: $224.30 Buy It Now | Add to watch list |
| HP PCI FIREWIRE CARD 300MB S 5185 2973 | |
 |
$210.00 End Date: Tuesday May-22-2012 16:10:47 PDT Buy It Now for only: $210.00 Buy It Now | Add to watch list |
| Hama IEEE 1394 Firewire kit PCI logiciel Ulead Video | |
 |
$169.20 End Date: Tuesday Jun-12-2012 9:20:43 PDT Buy It Now for only: $169.20 Buy It Now | Add to watch list |
| Belkin Firewire 3 Port PCI Karte | |
 |
$55.98 End Date: Tuesday Jun-5-2012 14:23:51 PDT Buy It Now for only: $55.98 Buy It Now | Add to watch list |
| travan drive imation 20 gb pc mac firewire ottimo per back up scheda pci ieee1 | |
 |
$139.94 End Date: Friday May-25-2012 8:13:21 PDT Buy It Now for only: $139.94 Buy It Now | Add to watch list |
| Lot 25 Adaptec Firewire IEEE 1394 AFW 4300C AFW 2100 PCI 1394a PC or MAC NOB | |
 |
$149.95 End Date: Sunday May-27-2012 20:58:50 PDT Buy It Now for only: $149.95 Buy It Now | Add to watch list |
| 89172 DeLock PCI Express Card Dual FireWire A FireWir | |
 |
$138.91 End Date: Friday May-25-2012 15:34:22 PDT Buy It Now for only: $138.91 Buy It Now | Add to watch list |
| PCI Schnittstellen Karte 4x USB 20 und 2x Firewire IEEE 1394 | |
 |
$28.60 End Date: Friday Jun-1-2012 12:25:20 PDT Buy It Now for only: $28.60 Buy It Now | Add to watch list |
| DeLOCK FireWire PCI Karte 3+1 Port FireWire Adapter | |
 |
$25.90 End Date: Saturday Jun-9-2012 13:33:28 PDT Buy It Now for only: $25.90 Buy It Now | Add to watch list |
| 4 Port Firewire IEEE 1394 PCI Card 4 6 Pin+Cable For DV | |
 |
$149.77 End Date: Tuesday Jun-19-2012 9:35:00 PDT Buy It Now for only: $149.77 Buy It Now | Add to watch list |
| 4 Port 4Pin to 6 Pin Firewire Controller PCI Card Adapter Cable For PC DVD iPod | |
 |
$149.60 End Date: Monday Jun-11-2012 8:48:00 PDT Buy It Now for only: $149.60 Buy It Now | Add to watch list |
| 4 Port Internal PCI Firewire IEEE Card Adapter Cable For Printers Digital Camera | |
 |
$149.53 End Date: Tuesday Jun-12-2012 10:27:31 PDT Buy It Now for only: $149.53 Buy It Now | Add to watch list |
| 4 Port internal USB Firewire PCI Interface HUB Card AV Capture Adapter Mac Cable | |
 |
$149.46 End Date: Saturday Jun-9-2012 11:19:21 PDT Buy It Now for only: $149.46 Buy It Now | Add to watch list |
| 1394 Firewire PCI Card for 98SE XP VISTA Window 7 Linux | |
 |
$149.38 End Date: Monday Jun-4-2012 2:43:07 PDT Buy It Now for only: $149.38 Buy It Now | Add to watch list |
| 4 Port Firewire IEEE1394 PCI Card 4 6 Pin Cable For DVD Camcorder Digital Camera | |
 |
$149.30 End Date: Wednesday Jun-13-2012 2:56:43 PDT Buy It Now for only: $149.30 Buy It Now | Add to watch list |
| PYRO PLATINUM DV PCI FIREWIRE API 530 W ADOBE 6 GERMAN | |
 |
$149.95 End Date: Monday Jun-18-2012 11:42:48 PDT Buy It Now for only: $149.95 Buy It Now | Add to watch list |
| 1 x CMP FW1394 3P KNIG FIREWIRE PCI CONTROLLER | |
 |
$17.17 End Date: Saturday Jun-2-2012 5:31:24 PDT Buy It Now for only: $17.17 Buy It Now | Add to watch list |
| Carte PCI Express Firewire 800 + USB 20 0 | |
 |
$111.84 End Date: Tuesday Jun-19-2012 10:18:25 PDT Buy It Now for only: $111.84 Buy It Now | Add to watch list |
| Carte PCI Express FireWire 400 1394A + USB 20 0 | |
 |
$106.36 End Date: Tuesday Jun-19-2012 10:17:52 PDT Buy It Now for only: $106.36 Buy It Now | Add to watch list |
| ADS Pyro Digital Video 1394 DV Firewire API 1394 PCI | |
 |
$129.00 End Date: Friday Jun-1-2012 15:54:26 PDT Buy It Now for only: $129.00 Buy It Now | Add to watch list |
| StarTech 3 Port 2b 1a PCI Express 1394 FireWire Adaptor | |
 |
$92.14 End Date: Wednesday May-30-2012 17:20:33 PDT Buy It Now for only: $92.14 Buy It Now | Add to watch list |
| Belkin FireWire 800 And USB 20 PCI Express Card USB FireWire Adapter PCI | |
 |
$126.86 End Date: Monday May-28-2012 8:44:37 PDT Buy It Now for only: $126.86 Buy It Now | Add to watch list |
| StarTech Mini PCI Express FireWire Card Adaptor | |
 |
$89.72 End Date: Wednesday May-23-2012 22:19:34 PDT Buy It Now for only: $89.72 Buy It Now | Add to watch list |
| ADAPTEC AHA 8945CP 1394 Firewire and SCSI PCI CARD AIC 5800AP | |
 |
$116.20 End Date: Sunday May-27-2012 16:09:00 PDT Buy It Now for only: $116.20 Buy It Now | Add to watch list |
| BELKIN F5U602 EXPRESS PCI CARD 2 USB 20 2 FIREWIRE 1394B | |
 |
$122.28 End Date: Wednesday Jun-6-2012 9:12:45 PDT Buy It Now for only: $122.28 Buy It Now | Add to watch list |
| BELKIN F5U602 EXPRESS PCI CARD 2 USB 20 2 FIREWIRE 1394B | |
 |
$122.28 End Date: Wednesday Jun-6-2012 14:51:22 PDT Buy It Now for only: $122.28 Buy It Now | Add to watch list |
| Belkin FireWire 800 and USB 20 PCI Express Card USB FireWire adapter F5U602 | |
 |
$121.99 End Date: Thursday May-24-2012 12:00:09 PDT Buy It Now for only: $121.99 Buy It Now | Add to watch list |
| Hp 508927 001 Ieee 1394b Firewire Interface Card Pci e | |
 |
$119.19 End Date: Monday May-28-2012 0:33:12 PDT Buy It Now for only: $119.19 Buy It Now | Add to watch list |
| StarTech Mini PCI Express FireWire Card Adaptor | |
 |
$101.12 End Date: Thursday May-31-2012 11:19:39 PDT Buy It Now for only: $101.12 Buy It Now | Add to watch list |
| Belkin FireWire 800 and USB 20 PCI ExpressCard | |
 |
$108.95 End Date: Wednesday May-23-2012 14:21:37 PDT Buy It Now for only: $108.95 Buy It Now | Add to watch list |
| Belkin FireWire 800 and USB 20 PCI ExpressCard | |
 |
$115.53 End Date: Sunday Jun-17-2012 15:28:43 PDT Buy It Now for only: $115.53 Buy It Now | Add to watch list |
| I O PCI Express MANHATTAN 2x FireWire 400 | |
 |
$59.35 End Date: Wednesday May-23-2012 13:54:51 PDT Buy It Now for only: $59.35 Buy It Now | Add to watch list |
| EXSYS 3x USB 20 3x FireWire B PCI Express Controller | |
 |
$97.32 End Date: Wednesday May-23-2012 2:58:58 PDT Buy It Now for only: $97.32 Buy It Now | Add to watch list |
| StarTech 3 Port 2b 1a Low Profile 1394 PCI Express FireWire Card Adaptor | |
 |
$97.47 End Date: Sunday Jun-3-2012 5:33:06 PDT Buy It Now for only: $97.47 Buy It Now | Add to watch list |
| 3 Port 2b 1a 1394 PCI Express FireWire Card Adapter | |
 |
$97.47 End Date: Tuesday Jun-19-2012 3:37:04 PDT Buy It Now for only: $97.47 Buy It Now | Add to watch list |
| EXSYS EX 16502E Dual Chip FireWire PCI Express Controller 2 Port | |
 |
$97.90 End Date: Friday Jun-15-2012 4:43:11 PDT Buy It Now for only: $97.90 Buy It Now | Add to watch list |
| BONA U2FW PCI01A USB 20 4 +FireWire 3 Host Adapter | |
 |
$99.50 End Date: Monday Jun-11-2012 5:34:05 PDT Buy It Now for only: $99.50 Buy It Now | Add to watch list |
| PCI FireWire IEEE 1394 3 + 1 Port Card + 4 6 Pin Cable | |
 |
$109.95 End Date: Friday Jun-8-2012 2:43:41 PDT Buy It Now for only: $109.95 Buy It Now | Add to watch list |
| PCI FireWire IEEE 1394 3 + 1 Port Card + 4 6 Pin Cable | |
 |
$109.95 End Date: Friday Jun-8-2012 3:13:08 PDT Buy It Now for only: $109.95 Buy It Now | Add to watch list |
| Carte PCI X FireWire 800 IEEE 1394B 2 ports B 1 port A | |
 |
$85.36 End Date: Tuesday Jun-19-2012 10:17:19 PDT Buy It Now for only: $85.36 Buy It Now | Add to watch list |
| EXSYS EX 6509E 3x FireWire + 3x USB 20 + 1x LAN PCI | |
 |
$88.67 End Date: Monday Jun-4-2012 15:32:29 PDT Buy It Now for only: $88.67 Buy It Now | Add to watch list |
| Belkin F5U602 3 Port FireWire 800 3 Port USB 20 PCI ExpressCard New | |
 |
$104.99 End Date: Sunday May-27-2012 18:36:22 PDT Buy It Now for only: $104.99 Buy It Now | Add to watch list |
| NEW Belkin FireWire 800 and USB 20 PCI ExpressCard | |
 |
$104.04 End Date: Tuesday May-22-2012 20:39:16 PDT Buy It Now for only: $104.04 Buy It Now | Add to watch list |
| Tarjeta PCI Express 3 Puertos Firewire 800 Mbsp | |
 |
$87.65 End Date: Monday May-28-2012 2:50:12 PDT Buy It Now for only: $87.65 Buy It Now | Add to watch list |
| EXSYS 4 x USB 20 3 x FireWire PCI Express Controller | |
 |
$85.11 End Date: Tuesday Jun-12-2012 13:43:58 PDT Buy It Now for only: $85.11 Buy It Now | Add to watch list |
| Exsys EX 6502E Dual FireWire A PCI Karte mit 2 Ports | |
 |
$82.63 End Date: Friday May-25-2012 3:04:42 PDT Buy It Now for only: $82.63 Buy It Now | Add to watch list |
| Sunix UFC2412 Firewire USB PCI E | |
 |
$99.95 End Date: Saturday May-26-2012 11:50:47 PDT Buy It Now for only: $99.95 Buy It Now | Add to watch list |
| Qty Lot 24 Dell 2 Port Adaptec AFW 2100 PCI FireWire Card Y9457 | |
 |
$99.88 End Date: Saturday May-26-2012 17:42:22 PDT Buy It Now for only: $99.88 Buy It Now | Add to watch list |
| Carte PCI Express firewire 800 3port 1394b + 1x1394a interne 0 | |
 |
$72.43 End Date: Tuesday Jun-19-2012 10:34:40 PDT Buy It Now for only: $72.43 Buy It Now | Add to watch list |
| StarTech Mini PCI Express FireWire Card Adaptor | |
 |
$83.43 End Date: Wednesday Jun-20-2012 14:10:18 PDT Buy It Now for only: $83.43 Buy It Now | Add to watch list |
| 160353 Manhattan FireWire PCI Express Card FireWire a | |
 |
$71.42 End Date: Wednesday May-23-2012 8:46:13 PDT Buy It Now for only: $71.42 Buy It Now | Add to watch list |
| Belkin FireWire 3 Port PCI Express Card F5U504 | |
 |
$93.36 End Date: Sunday Jun-3-2012 1:05:40 PDT Buy It Now for only: $93.36 Buy It Now | Add to watch list |
| Belkin FireWire 800 and USB 20 PCI Express Combo Card NEW | |
 |
$85.95 End Date: Sunday May-27-2012 14:26:19 PDT Buy It Now for only: $85.95 Buy It Now | Add to watch list |
| StarTech 3 Port 2b 1a PCI Express 1394 FireWire Adaptor Card FireWire Adaptor PC | |
 |
$85.82 End Date: Wednesday Jun-20-2012 13:47:48 PDT Buy It Now for only: $85.82 Buy It Now | Add to watch list |
| StarTechcom 3 Port 2b 1a 1394 PCI Express FireWire Card PEX1394B3 | |
 |
$92.72 End Date: Thursday May-31-2012 11:41:52 PDT Buy It Now for only: $92.72 Buy It Now | Add to watch list |
| DELL CONTROLLER CARD 1394A PCI FIREWIRE 6D906 | |
 |
$79.00 End Date: Friday Jun-1-2012 14:32:53 PDT Buy It Now for only: $79.00 Buy It Now | Add to watch list |
| StarTechcom 3 Port 2b 1a PCI FireWire Adapter Card w DV Editing Kit | |
 |
$74.89 End Date: Friday Jun-15-2012 0:43:13 PDT Buy It Now for only: $74.89 Buy It Now | Add to watch list |
| NEW Lot of 10 BUSlink 3 Port 1394 FireWire PCI Card | |
 |
$89.99 End Date: Sunday May-27-2012 14:17:48 PDT Buy It Now for only: $89.99 Buy It Now | Add to watch list |
| LA CIE FIREWIRE 800 PCI CARD | |
 |
$89.99 End Date: Friday Jun-15-2012 8:53:26 PDT Buy It Now for only: $89.99 Buy It Now | Add to watch list |
| BW851AA HP FireWire adapter PCI Express x1 Firewi | |
 |
$67.54 End Date: Wednesday May-23-2012 9:14:46 PDT Buy It Now for only: $67.54 Buy It Now | Add to watch list |
| NitroAV Dual Processor 1394b FireWire800 PCI Express x1 Host Bus Adapter | |
 |
$88.60 End Date: Tuesday Jun-5-2012 14:58:33 PDT Buy It Now for only: $88.60 Buy It Now | Add to watch list |
| SIIG 3 port PCI FireWire 800 adapter NN 831012 S2 | |
 |
$87.97 End Date: Thursday May-31-2012 11:32:31 PDT Buy It Now for only: $87.97 Buy It Now | Add to watch list |
| Mini PCI e PCI Express 1394a 1394b Firewire Card 1394 | |
 |
$77.44 End Date: Sunday Jun-17-2012 15:18:06 PDT Buy It Now for only: $77.44 Buy It Now | Add to watch list |
| STARTECH 3 PORT FIREWIRE ADAPTER CARD P N PCI1394B 3 | |
 |
$67.81 End Date: Friday Jun-8-2012 6:23:49 PDT Buy It Now for only: $67.81 Buy It Now | Add to watch list |
| DS 33205 DIGITUS DS 33205 FireWire adapter PCI 64 | |
 |
$64.57 End Date: Friday May-25-2012 15:40:29 PDT Buy It Now for only: $64.57 Buy It Now | Add to watch list |
| F5U504 3 Port FireWire PCI Express Card | |
 |
$85.91 End Date: Friday Jun-8-2012 1:29:41 PDT Buy It Now for only: $85.91 Buy It Now | Add to watch list |
| 4 x KEC 1582T 4 Port IEEE 1394 FireWire Low Profile PCI Controller Card | |
 |
$34.62 End Date: Sunday Jun-17-2012 19:01:49 PDT Buy It Now for only: $34.62 Buy It Now | Add to watch list |
| F5U504 FireWire 3 Port PCI Expr Card Belkin | |
 |
$84.99 End Date: Tuesday Jun-19-2012 13:13:55 PDT Buy It Now for only: $84.99 Buy It Now | Add to watch list |
| Tango Express 800 Firewire 800 USB 20 Combo PCI Express Card BRAND NEW | |
 |
$72.99 End Date: Friday May-25-2012 11:20:37 PDT Bid now | Add to watch list |
| BELKIN COMPONENTS FIREWIRE 800PCI CARD F5U623 APL | |
 |
$84.35 End Date: Wednesday Jun-20-2012 15:58:07 PDT Buy It Now for only: $84.35 Buy It Now | Add to watch list |
| StarTech PEX1394B3LP 3 port 2b 1a LP 1394 PCI Express FireWire Card FireWire 800 | |
 |
$70.99 End Date: Wednesday May-23-2012 21:42:26 PDT Buy It Now for only: $78.99 Buy It Now | Bid now | Add to watch list |
| EXSYS EX 6411 FireWire B PCI Karte 64 Bit 2+1 Port | |
 |
$67.36 End Date: Thursday May-24-2012 3:50:11 PDT Buy It Now for only: $67.36 Buy It Now | Add to watch list |
| Belkin F5U504 FireWire 3 Port PCI Expr Card | |
 |
$72.98 End Date: Sunday Jun-3-2012 14:22:41 PDT Buy It Now for only: $72.98 Buy It Now | Add to watch list |
| SIIG 3 PORT PCI FIREWIRE 800 ADAPTER NN 831012 S2 | |
 |
$67.88 End Date: Friday May-25-2012 18:23:57 PDT Buy It Now for only: $67.88 Buy It Now | Add to watch list |
| StarTechcom 1394 PCI Express FireWire Card Adapter | |
 |
$67.88 End Date: Thursday Jun-7-2012 0:04:19 PDT Buy It Now for only: $67.88 Buy It Now | Add to watch list |
| PCI 8 PORT PORTS USB 20 USB2 FIREWIRE 1394 COMBO CARD | |
 |
$78.99 End Date: Monday Jun-4-2012 18:35:11 PDT Buy It Now for only: $78.99 Buy It Now | Add to watch list |
| StarTech PEX1394B3LP 3 port 2b 1a LP 1394 PCI Express FireWire Card FireWire 800 | |
 |
$83.50 End Date: Tuesday Jun-19-2012 15:01:54 PDT Buy It Now for only: $83.50 Buy It Now | Add to watch list |
| BELKIN F5U508V1 5PORT COMBO USB 20 FIREWIRE PCI CARD 3USB 2FW FOR PC | |
 |
$83.33 End Date: Wednesday Jun-6-2012 8:59:50 PDT Buy It Now for only: $83.33 Buy It Now | Add to watch list |
| BELKIN F5U508V1 5PORT COMBO USB 20 FIREWIRE PCI CARD 3USB 2FW FOR PC | |
 |
$83.33 End Date: Wednesday Jun-6-2012 14:52:42 PDT Buy It Now for only: $83.33 Buy It Now | Add to watch list |
| Carte PCI Express Firewire Low profile 2+1 ports 1394a | |
 |
$58.89 End Date: Tuesday Jun-19-2012 10:06:49 PDT Buy It Now for only: $58.89 Buy It Now | Add to watch list |
| PEX1394B3 Firewire PCI Express Card Startechcom | |
 |
$82.99 End Date: Wednesday Jun-20-2012 4:28:41 PDT Buy It Now for only: $82.99 Buy It Now | Add to watch list |
| Startech PEX1394B3 Firewire PCI Express Card | |
 |
$71.98 End Date: Wednesday Jun-6-2012 15:32:20 PDT Buy It Now for only: $71.98 Buy It Now | Add to watch list |
| StarTech PEX1394 2 PCI Express 3 2 Port 1394 Firewire Cards NEW SEALED | |
 |
$74.95 End Date: Wednesday Jun-20-2012 12:40:58 PDT Buy It Now for only: $74.95 Buy It Now | Add to watch list |
| FireWire 800 Karte 3 Ports PCI | |
 |
$72.52 End Date: Tuesday Jun-19-2012 21:59:06 PDT Buy It Now for only: $72.52 Buy It Now | Add to watch list |
| Belkin F5U623 APL 3PORT FIREWIRE 800 PCI CARD | |
 |
$81.54 End Date: Tuesday Jun-5-2012 9:58:29 PDT Buy It Now for only: $81.54 Buy It Now | Add to watch list |
| Belkin Hi Speed USB 20 and FireWire PCI Card USB FireWire adapter F5U508V1 | |
 |
$80.99 End Date: Saturday Jun-2-2012 9:50:46 PDT Buy It Now for only: $80.99 Buy It Now | Add to watch list |
| BELKIN F5U504 FireWire 3 Port PCI Expr Card | |
 |
$80.75 End Date: Friday Jun-8-2012 20:38:00 PDT Buy It Now for only: $80.75 Buy It Now | Add to watch list |
| NEW STARTECHCOM PEX1394B3 THIS 3 PORT PCI EXPRESS FIREWIRE ADAPTER CARD LETS | |
 |
$80.08 End Date: Monday Jun-18-2012 14:32:45 PDT Buy It Now for only: $80.08 Buy It Now | Add to watch list |
| CONTROLLER COMBO 4 PORTE USB E 2 PORTE FIREWIRE PCI | |
 |
$29.25 End Date: Sunday Jun-17-2012 4:46:52 PDT Buy It Now for only: $29.25 Buy It Now | Add to watch list |
| SIIG DP FireWire 2 Port PCIe FireWire adapter PCI E | |
 |
$72.99 End Date: Monday Jun-4-2012 21:36:15 PDT Buy It Now for only: $72.99 Buy It Now | Add to watch list |
| Startechcom PEX1394B3 StarTechcom 3 Port 2b 1a 1394 PCI Express FireWire C | |
 |
$79.15 End Date: Saturday Jun-2-2012 17:29:26 PDT Buy It Now for only: $79.15 Buy It Now | Add to watch list |
| Belkin FireWire 800 3 Port PCI Card FireWire adapter PCI FireWi F5U623 APL | |
 |
$78.99 End Date: Sunday Jun-3-2012 10:08:07 PDT Buy It Now for only: $78.99 Buy It Now | Add to watch list |
| Exsys EX 16500E FireWire PCI Express Controller 3+1 | |
 |
$63.55 End Date: Monday Jun-11-2012 23:37:53 PDT Buy It Now for only: $63.55 Buy It Now | Add to watch list |
| SIIG FIREWIRE 800 PCI 32T NN 830112 S2 | |
 |
$62.85 End Date: Thursday May-31-2012 10:55:06 PDT Buy It Now for only: $62.85 Buy It Now | Add to watch list |
| Belkin F5U504 FireWire 3 Port PCI Express Card | |
 |
$78.68 End Date: Friday Jun-8-2012 8:45:23 PDT Buy It Now for only: $78.68 Buy It Now | Add to watch list |
File Integrity Monitoring - PCI DSS Requirements 10, 10.5.5 and 11.5
Although FIM or File-Integrity Monitoring is only mentioned specifically in two sub-requirements of the PCI DSS (10.5.5 and 11.5), it is actually one of the more important measures in securing business systems from card data theft.
What is it, and why is it important?
File Integrity monitoring systems are designed to protect card data from theft. The primary purpose of FIM is to detect changes to files and their associated attributes. However, this article provides the background to three different dimensions to file integrity monitoring, namely:
- secure hash-based FIM, used predominantly for system file integrity monitoring
- file contents integrity monitoring, useful for configuration files from firewalls, routers and web servers
- file and/or folder access monitoring, vital for protecting sensitive data
Secure Hash Based FIM
Within a PCI DSS context, the main files of concern include:
- System files e.g. anything that resides in the Windows/System32 or SysWOW64 folder, program files, or for Linux/Unix key kernel files
The objective for any hash-based file integrity monitoring system as a security measure is to ensure that only expected, desirable and planned changes are made to in scope devices. The reason for doing this is to prevent card data theft via malware or program modifications.
Imagine that a Trojan is installed onto a Card Transaction server - the Trojan could be used to transfer card details off the server. Similarly, a packet sniffer program could be located onto an EPoS device to capture card data - if it was disguised as a common Windows or Unix process with the same program and process names then it would be hard to detect. For a more sophisticated hack, what about implanting a 'backdoor' into a key program file to allow access to card data??
These are all examples of security incidents where File-Integrity monitoring is essential in identifying the threat.
Remember that anti-virus defenses are typically only aware of 70% of the world's malware and an organization hit by a zero-day attack (zero-day marks the point in time when a new form of malware is first indentified - only then can a remediation or mitigation strategy be formulated but it can be days or weeks before all devices are updated to protect them.
How far should FIM measures be taken?
As a starting point, it is essential to monitor the Windows/System32 or SysWOW64 folders, plus the main Card Data Processing Application Program Folders. For these locations, running a daily inventory of all system files within these folders and identifying all additions, deletions and changes. Additions and Deletions are relatively straightforward to identify and evaluate, but how should changes be treated, and how do you assess the significance of a subtle change, such as a file attribute? The answer is that ANY file change in these critical locations must be treated with equal importance. Most high-profile PCI DSS security breaches have been instigated via an 'inside man' - typically a trusted employee with privileged admin rights. For today's cybercrime there are no rules.
The industry-acknowledged approach to FIM is to track all file attributes and to record a secure hash. Any change to the hash when the file-integrity check is re-run is a red alert situation - using SHA1 or MD5, even a microscopic change to a system file will denote a clear change to the hash value. When using FIM to govern the security of key system files there should never be any unplanned or unexpected changes - if there are, it could be a Trojan or backdoor-enabled version of a system file.
Which is why it also crucial to use FIM in conjunction with a 'closed loop' change management system - planned changes should be scheduled and the associated File Integrity changes logged and appended to the Planned Change record. 3
File Content/Config File Integrity Monitoring
Whilst a secure hash checksum is an infallible means of identifying any system file changes, this does only tell us that a change has been made to the file, not what that change is. Sure, for a binary-format executable this is the only meaningful way of conveying that a change has been made, but a more valuable means of file integrity monitoring for 'readable' files is to keep a record of the file contents. This way, if a change is made to the file, the exact change made to the readable content can be reported.
For instance, a web configuration file (php, aspnet, js or javascript, XML config) can be captured by the FIM system and recorded as readable text; thereafter changes will be detected and reported directly. 3
Similarly, if a firewall access control list was edited to allow access to key servers, or a Cisco router startup config altered, then this could allow a hacker all the time needed to break into a card data server. For more information visit Database outsourcing
One final point on file contents integrity monitoring - Within the Security Policy/Compliance arena, Windows Registry keys and values are often included under the heading of FIM. These need to be monitored for changes as many hacks involve modifying registry settings. Similarly, a number of common vulnerabilities can be identified by analysis of registry settings. For more information visit Database outsourcing
File and/or Folder Access Monitoring
The final consideration for file integrity monitoring is how to handle other file types not suitable for secure hash value or contents tracking. For example, because a log file, database file etc will always be changing, both the contents and the hash will also be constantly changing. Good file integrity monitoring technology will allow these files to be excluded from any FIM template.
However, card data can still be stolen without detection unless other measures are put in place. As an example scenario, in an EPoS retail system, a card transaction or reconciliation file is created and forwarded to a central payments server on a scheduled basis throughout the trading day. The file will always be changing - maybe a new file is created every time with a time stamped name so everything about the file is always changing.
The file would be stored on an EPoS device in a secure folder to prevent user access to the contents. However, an 'inside man' with Admin Rights to the folder could view the transaction file and copy the data without necessarily changing the file or its attributes. Therefore the final dimension for File Integrity Monitoring is to generate an alert when any access to these files or folders is detected, and to provide a full audit trail by account name of who has had access to the data.
Much of PCI DSS Requirement 10 is concerned with recording audit trails to allow a forensic analysis of any breach after the event and establish the vector and perpetrator of any attack.
Article done by Mark Kedgley Article Source: http://EzineArticles.com/?expert=Mark_Kedgley