Why Tiger Still Matters

Tiger is an open-source security auditing tool that was originally developed at Texas A&M University after a coordinated attack on campus computers in 1992. It checks a Unix system for the problems that most often lead to trouble, including weak file permissions, outdated account settings, unnecessary network services, and paths that could give unauthorized users root access. When the audit finishes, Tiger produces a report that ranks findings by severity, which turns a system’s quiet weaknesses into a short to-do list for an administrator. The tool can also be scheduled to run on a regular basis, and it is still available through Debian today.
Tiger is not a replacement for a modern intrusion detection system, and newer auditing tools offer more up-to-date checks. The reason Tiger is still worth knowing is that the weaknesses it looks for never really change. Systems become insecure gradually, through ordinary updates and small setting changes, and any tool that makes those quiet changes visible remains useful no matter how old it is.

Leave a Reply