|
Home > Archive > Snort > September 2004 > [Snort-users] SFS version 1.0 - Snort alerts analysis tool
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
[Snort-users] SFS version 1.0 - Snort alerts analysis tool
|
|
|
|
| Chris Green 2004-09-15, 5:45 pm |
| Orit Vidas <orit@securimine.com> writes:
> SFS version 1.0 may be downloaded for free from the Securimine
> website at: www.securimine.com
How do you determine "Threat level"?
Attack-Response Invalid URL is the highest threat level on the sample
page.
--
Chris Green <cmg@dok.org>
"I'm beginning to think that my router may be confused."
-------------------------------------------------------
This SF.Net email is sponsored by: thawte's Crypto Challenge Vl
Crack the code and win a Sony DCRHC40 MiniDV Digital Handycam
Camcorder. More prizes in the weekly Lunch Hour Challenge.
Sign up NOW http://ad.doubleclick.net/clk;10740251;10262165;m
________________________________________
_______
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists...nfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf....ist=snort-users
| |
| Orit Vidas 2004-09-15, 5:45 pm |
| Chris,
Thank you for your interest in Securimine.
How does SFS calculate the 'threat level' in its 'Top Threats Report'?
SFS defines a behavioral model based on logs of events gathered by your
system. SFS then assigns a threat level for each group of alerts,
according to the deviation of this group from the normal behavior of
your specific system. The threat level is calculated in percentage from
0% (no threat - this group of alerts represents behavior that happens in
the system regularly) to 100% (highest threat- SFS could not find any
similar behavior in the behavioral model.
You can find answers to this and other questions at:
www.securimine.com/faq.html
If you have additional questions, please let me know.
Thanks,
- Orit
-----Original Message-----
From: Chris Green [mailto:cmg@uab.edu]
Sent: Wednesday, September 15, 2004 12:36 PM
To: Orit Vidas
Cc: snort-users@lists.sourceforge.net
Subject: Re: [Snort-users] SFS version 1.0 - Snort alerts analysis tool
Orit Vidas <orit@securimine.com> writes:
> SFS version 1.0 may be downloaded for free from the Securimine
> website at: www.securimine.com
How do you determine "Threat level"?
Attack-Response Invalid URL is the highest threat level on the sample
page.
--
Chris Green <cmg@dok.org>
"I'm beginning to think that my router may be confused."
-------------------------------------------------------
This SF.Net email is sponsored by: thawte's Crypto Challenge Vl
Crack the code and win a Sony DCRHC40 MiniDV Digital Handycam
Camcorder. More prizes in the weekly Lunch Hour Challenge.
Sign up NOW http://ad.doubleclick.net/clk;10740251;10262165;m
________________________________________
_______
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists...nfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf....ist=snort-users
| |
| Edin Dizdarevic 2004-09-22, 10:25 pm |
| Hi,
under which licence is SFS distributed? Is it free, open source, etc.?
Regards,
Edin
Orit Vidas wrote:
> Securimine for Snort (SFS) is a new web based application designed to analyze
> Snort alerts and provide concise reports of the top threats you are facing.
>
> SFS version 1.0 may be downloaded for free from the Securimine website at:
> www.securimine.com
>
> Please provide feedback and inquiries to: support@securimine.com
>
> The Securimine Team
> http://www.securimine.com
>
--
Edin Dizdarevic
-------------------------------------------------------
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM.
Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php
________________________________________
_______
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists...nfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf....ist=snort-users
|
|
|
|
|