Re: IDS - DECISION SUPPORT SYSTEM

["David J. Bianco" <david () vorant com>]

I'm not familiar with Decision Support Systems as defined by the marketplace,
but taking a strict English definition, I recommend you have a look at the
sguil project.  Sguil is an open source Network Security Monitoring (NSM)
solution that ties together IDS alerts, network session data, full packet
logs and other data to give an intrusion analyst a great deal of information
to help them research and make informed decisions about the security of
their network.

Check out the project page at http://www.sguil.org or see my overview
presentation at http://www.vorant.com/downloads.html if you think this
might be what you're looking for.

        David

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
------------------------------------------------------------------------