First page Back Continue Last page Summary Graphics
Application Links (cont.)
Intrusion Detection - Network-based
- Snort - Written by Martin Roesch, Snort can be thought of as "NFR's little brother." It is a lightweight IDS with a variety of plugins and add-ons. Whitehats.com provides Snort rules that are updated hourly.
- http://www.snort.org
- http://www.whitehats.com/ids/index.html
Note: No IDS is perfect, nor will it catch everything. If the situation warrants, a site could run more than one IDS, for instance a NIDS and a host-based IDS or multiple NIDS. An extra set of eyes never hurt...
Notes: