IDS mailing list archives

Automated IDS Signature Generator?


From: <quakeroats () hushmail com>
Date: 17 Jun 2003 22:34:29 -0000



IDS Folk,

Is there a utility/function/program that automatically generates an IDS 
signature based on a recording of a monitored exploit attempt? For 
example, say the exploit is brought into an isolated lab environment, and 
we record the whole attack. At the end of the attack, this "thing" spits 
out automated scripts for any number of IDS solutions. Seems like it 
would be something that companies like Snort/Symantec/Dragon/etc. might 
already have, but I've never heard of such a utility.

With Love,

Quaker Oats

"it's mmm mmm good..."

-------------------------------------------------------------------------------
Attend the Black Hat Briefings & Training, July 28 - 31 in Las Vegas, the 
world's premier technical IT security event! 10 tracks, 15 training sessions, 
1,800 delegates from 30 nations including all of the top experts, from CSO's to 
"underground" security specialists.  See for yourself what the buzz is about!  
Early-bird registration ends July 3.  This event will sell out. www.blackhat.com
-------------------------------------------------------------------------------


Current thread: