RE: Meet Marty Roesch in NY - Learn the Future of Snort!

["Jennifer Talcott" <jennifer.talcott () sourcefire com>]

Randal,

There is a DC area group, and you can find more information at
http://snort.nisec.net/. We would be happy to host a meeting at our
headquarters and if other folks are interested, send us an e-mail at
snort_groups () sourcefire com and let us know! Thanks!

Jennifer

-----Original Message-----
From: Randal T. Rioux [mailto:randy () procyonlabs com] 
Sent: Monday, October 10, 2005 6:38 PM
To: Jennifer Talcott
Cc: Snort-Users@Lists. Sourceforge. Net
Subject: Re: [Snort-users] Meet Marty Roesch in NY - Learn the Future of
Snort!

Is there a DC area users group? I live down the street from Sourcefire
in Columbia, MD... we could meet there! :-)


Jennifer Talcott wrote:
> Hey Everyone,
>
> Due to an increasing amount of interest recently in forming a New York
City
> Snort User Group, we've decided to invite all of the users in the area to
> join Marty and the team for an upcoming presentation. IBM has offered to
> sponsor a meeting where Marty will be discussing Target-based IDS: The
> Future of the Industry. Join us for great Snort conversation, drinks, and
> (of course) Snort shwag!
>
> Presentation Topic:
> First generation solutions, including IPS, suffer from lack of information
> that leads to ambiguity - sensors operate with no compositional knowledge
of
> the network components they are defending, leading to false
> positives/negatives and evasions. To solve this, Sourcefire is developing
a
> target-based detection engine that auto-configures itself in real-time
based
> on the attributes of the targeted system. This methodology requires a
> continuous feed of all the attribute data for all the devices on the
> protected network, even as it evolves - information provided by Sourcefire
> RNA. The system will work by feeding attribute data from RNA, enabling
> policy application to occur at a per-flow level of granularity, which will
> maximize the blocking capability while minimizing chances of accidental
DoS
> as a result of false positives or misapplication of policies to improper
> targets.
>
> Date and Time:
> November 10th, 2005
> 5:30 - 7:00 PM
> Cocktails Afterward - Location TBA
>
> Location:
> IBM New York City Office
> 590 Madison
> New York, NY
>
> Register here: http://www.snort.org/registrations/rsvp.html
> Please note: RSVP is required for building access
>
> Questions or comments can be directed to snort-marketing () sourcefire com.
>
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by:
> Power Architecture Resource Center: Free content, downloads, discussions,
> and more. http://solutions.newsforge.com/ibmarch.tmpl
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=ort-users



-------------------------------------------------------
This SF.Net email is sponsored by:
Power Architecture Resource Center: Free content, downloads, discussions,
and more. http://solutions.newsforge.com/ibmarch.tmpl
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users