Snort mailing list archives

DoD plugin?


From: "Clifford, Shawn A" <shawn.a.clifford () lmco com>
Date: Mon, 30 Apr 2001 10:31:56 -0400


This was in the lastest SANS training email.  Does anyone know more about
this plugin, whether it will become public, etc?  Is there already something
similar available?

-- Shawn

--------------------------------------
In the last SANS and GIAC update we talked about fighting back.  Thank
you for all the responses, it turns out this is a hot theme.  You can
see it in action on web pages like
http://www.dshield.org/fightback.html 
http://www.mynetwatchman.com and www.incidents.org.  
The only thing missing is you if you aren't a contributor.  By the way,
we are having trouble getting to word to Asia Pacific region ISPs. If
you are in the Asia Pacific region and you are willing to help, would
you please send the:
- Name of your ISP 
- Their IP address range 
- Contact point for abuse or incidents to info () dshield org

****************************************
Information Security Heroes

All of these "fight back" programs involve making sense of large volumes
of data.  To do that we need techniques that allow for massive data
reduction.  Lt. Stephen D. Donald USN, and Captain Robert V.  McMillen
USMC, from the Naval Postgraduate School.  worked for months, 7 days a
week, taking as little time for sleep as possible, building a new
intrusion detection capability based on a Snort plugin. The tool, while
still under development, provides a realtime, intuitive graphics display
and is being used by analysts on operational DoD networks as one more
capability to help defend networks and identify cyber- attacks for which
there is no known signature.  This is a DoD project and I don't know if
it will ever be available for the general population, but this is
exactly the sort of progress that we, as a community, need to make.
--------------------------------------

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: