Full-width image
Directory Comparison - Prevent Unauthorized File Changes


The term 【Directory】 is commonly used in Linux/Unix systems, while 【Folder】 is more familiar to Microsoft Windows systems.
Here, we will refer to 【Folders】 collectively as 【Directories】.
Most servers have antivirus software installed for security protection, and the WATCHDOG system also enhances host security with protective measures.
The 【Directory Comparison】 function is one of them, primarily targeting high-risk files within directories, first archiving them and then regularly performing 100% binary comparisons.


File types within the directory can include:
➢ Binary program files 【.exe, .dll】
➢ Shell Script program files
➢ System configuration files
➢ Text files
➢ Password files
➢ Binary image files

【Directory Comparison】 protects and prevents program code or configuration files from being unintentionally modified or maliciously tampered with.
It also prevents them from becoming a channel for malicious hacker viruses, causing the program to fail to execute correctly.
In monitoring important host servers, the directory comparison function is crucial for preventing the above situations.
The comparison function mainly involves performing 100% binary comparisons of specified programs or files.
It ensures that programs or files match the archived originals, useful for checking important system or application program versions.

System Specifications for Monitoring Directory Comparison
➢ Detection Purpose: 100% binary comparison to check if specified files within directories match the archived originals.
➢ Monitoring Target: Program or file names.
➢ Alert Conditions: Comparison differences, new files.
➢ Real-time Information: Normal/alert publication.
➢ Information Collection: Messages, alert publication/release times.
➢ Emergency Response: Notification, execution of predefined programs, file restoration.
➢ Alert Threshold: Comparison differences.

Program Comparison vs. Directory Comparison
➢ 【Program Comparison】 involves 100% binary comparison of a single specified file.
➢ 【Directory Comparison】 involves 100% binary comparison of all files within a specified directory, including checking for new files within the directory.
It can compare files and directories within up to three levels, issuing alerts if differences are found.



Back to the previous page