FREE Registration is required
Overview:
A powerful strategy in intrusion detection is the separation of surveillance mechanisms from a site's policy for processing observed events. The Bro intrusion detection system has been using the notion of policy-neutral events as the basic building blocks for the formulation of a site's security policy since its conception. A recent addition to the system is the ability to exchange events with other Bro peers to allow distributed detection. This paper extends Bro's existing event model to fulfill the requirements of scalable policy-controlled distributed event management, including mechanisms for event publication, subscription, processing, propagation, and correlation.
(Is this item miscategorized? Does it need more tags? Let us know.)
| Format: | Size: | 161 KB | |
| Date: | Jan 2008 | ||
| Pages: | 7 |
People who downloaded this item also downloaded
Top results from Network Security
White Papers, Webcasts, and Resources
- Create Enduring Customer Relationships OracleDevelop profitable, long-term relationships with your customers by truly differentiating your business with a solid and strategic loyalty program.
- Live Webcast: Enhanced Availability in a Virtual Data Center with the Dell PS Series and Microsoft Windows Server 2008 R2 Hyper-V Dell EqualLogicLearn how to use the new features of Microsoft Windows Server 2008 R2 Hyper-V to boost the availability of your virtualized data center.
- IBM WebSphere Portal for z/OS taps into System z, Web 2.0: Executive update IBMSee how to lower costs and extract value faster with more responsive, interactive and intuitive business applications from WebSphere Portal Version 6.1.
Premier Vendor Content Whitepapers, webcasts & resources from our Power Center Sponsors
- News, Insights, Guidance
Visit CBSMoneyWatch.com Today -
MoneyWatch.com is the premier destination for smart, practical personal finance advice. Watch the latest Human Capital videos to make the most of your biggest asset - your earning power
- Learn more >>
Featured Training Courses
Enterprise Applications
- Check out some of the easiest and most powerful ways to boost productivity while saving money on your application infrastructure. See ZDNet's comprehensive Enterprise Application resource center, now!
- New Online Dashboard
- Read about top issues IT decision-makers face every day, plus get cost effective solutions to real life IT problems. Oracle Topline






