• Embed Doc
  • Copy Link
  • Readcast
  • Collections
  • CommentGo Back
Download
 
Harnessing thePower of Snort 
®
Brian Caswell
Principal Research Engineer 
Sourcefire Vulnerability Research Team
 
2
Background
What is Snort?
Open Source packet analysis tool
The most widely deployed Network Intrusion DetectionSystem (NIDS)
The de facto standard in intrusion detection andprevention
Who is Brian Caswell?
Sourcefire Vulnerability Research Team - PrincipalResearch Engineer 
Keeping Snort users ahead of the threat
Snort Rules Maintainer 
Author 
Snort 2.1 Intrusion Detection: Second Edition
 
3
Snort History
Initial release by Marty Roesch in 1998
Original goals of Snort:
Traffic analysis tool for home network
Debugger for service simulators Marty was developingfor a honeypot system
Learning tool for libpcap
Initial open source release inDecember 1998
Just a sniffer, no rule language
Rules implemented early 1999
1.0 release, June 1999
Basic rules language, stateless
of 00

Leave a Comment

You must be to leave a comment.
Submit
Characters: ...
You must be to leave a comment.
Submit
Characters: ...