Not Logged In [Login Now]


Medium Severity
Definition ID 205, Last Updated Apr 12th 2010, 09:56 p.m. (Revision 2)


Detects any change in a resource based on it's hash signature


This definition generates a has signature for a resource (web-page, image, stylesheet) and alerts whenever the resource changes. This definition is highly unlikely to produce false negatives (i.e. fail to detect an unauthorized change) since it detects any change to a given resource. However, this definition is not likely to be useful on dynamically generated content since the hash signature will constantly change and thus produce false positives.

False Positives

This definition detects any change and therefore is prone to false positives on pages that are not static.

Definition Code