question about anomalies detection

faisal99_at_inf.its-sby.edu
Date: 09/01/04

  • Next message: Siles, Raul: "New Honeynet Project Security Challenge (SotM 32)" 
    Date: Wed, 1 Sep 2004 14:31:41 +0700 (WIT)
To: focus-ids@securityfocus.com

    Hai everyone,
    sory if my question seems to be dummy question,
    but I need several thing to know about anomalies detection for my college
    assignment. Below are something to answer(if you don't mind)

    1. To train the anomalies detection system, we must train the application
    with the normal profile. My question is how we get the normal profile, are
    they built by ourself or we try to get from our network dump data to be
    set as normal profile or we use the prebuild data on the net(like the data
    on the Lincoln Lab Data?)

    2. Is there any paper about SPADE(Snort Plugin), I've googling for
    sometimes but never found one.

    thnkyou, for the attention.
    regards

    Nafis Faisal

  • Next message: Siles, Raul: "New Honeynet Project Security Challenge (SotM 32)"