RE: Anomaly Based Network IDS

crayola_at_optonline.net
Date: 06/22/04

  • Next message: Adam Powers: "Re: ssh and ids" 
    Date: Tue, 22 Jun 2004 12:43:08 -0400
To: focus-ids@securityfocus.com

    Is anyone aware of any opensource Network Behaviour Anomoly Detection programs or projects out there? Something that is tracking what traffic is going
    where, how much, how often, from where, to where, using what ports... etc. Letting
    you figure out what is normal.. then alerting when normal gets to far out of wack.

    It would seem to be an excellent partner to a Signature based IDS like Snort or Dragon for gaining real insight into what is flowing over the network.

    Thanks,
    Mike

    ---------------------------------------------------------------------------

    ---------------------------------------------------------------------------

  • Next message: Adam Powers: "Re: ssh and ids"
    • Quantcast