4th year student trying to use snort in their project

[Shane Corridon via Snort-devel <snort-devel () lists snort org>]

Hi All,



I am a 4th year I.T Management student in Cork Institute of Technology. I
am currently working on my Final year project. I am building an automated
open source software analyser and vulnerability detector. I wish to use
snort to analysis open source software that is downloaded from the web by
users. I am unsure how to use snort to analysis software downloads without
installing them on the machine.


The flow of my application is firstly a user downloads any free online
software, this will then be analysed using snort and lastly the download
will either be blocked or marked safe to use.



I need to use snort to examine the software source code and give a result
on whether or not the software is safe for the user to use.



Can you tell me:

   1. Is it possible to use snort to examine software downloads which have
   not yet been installed on the machine?
   2. what file paths is snort monitoring for executable software
   applications
   3. how does snort know what to analysis. is it looking for the file
   extension such as .exe?
   4. If the software downloads need to be installed before snort can scan
   them, then can I use a script to move the downloads into the appropriate
   paths so snort can analyse the download without it being installed?

Any help is greatly appreciated!



Best Regards
Shane

_______________________________________________
Snort-devel mailing list
Snort-devel () lists snort org
https://lists.snort.org/mailman/listinfo/snort-devel

Please visit http://blog.snort.org for the latest news about Snort!