The Experts below are selected from a list of 3 Experts worldwide ranked by ideXlab platform
Mark Eanes - One of the best experts on this subject based on the ideXlab platform.
-
Key fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46 Wanted Dead or Alive: Snort Intrusion Detection System
2003Co-Authors: Mark EanesAbstract:With the status of intrusion detection system’s (IDS) future doubted by some and supported by others, the steps involved in building a distributed IDS are questioned. Issues with deployment and implementation are outlined in summary. Review of currently available documentation and setup of systems, while updating applications required for the builds, are conducted to determine what problems may be encountered and if solutions or workarounds exist. A question of what additional security measures may be performed is addressed, along with a means to duplicate systems inexpensively. Overview An emergency response plan for incident handling exists. Screening Router and firewall are filtering packets permitted into the network. There is an anti-viral gateway scanning messages destined for the users ' mailboxes. But what about the traffic 'permitted ' into the network, past the Router, through the firewall, which contains malicious code, the latest exploit against the company's web server, or the newest buffer overflow for the organization's nameserver? Is anyone awar