Add Comment

You are not currently logged in. If you do not have a user account then please consider creating one and logging in before you post your comment. This will allow you to track replies to your comment, and take part in the site much more freely.

To add your comment, fill in all the boxes below and then preview it to make sure you're happy with the way that it looks.

This is the comment you were replying to, attached to the article Question: How much Security is enough?:


Re: Question: How much Security is enough?
Posted by Steve (82.41.xx.xx) on Wed 7 Sep 2005 at 09:33

I'll add it to the list ...!

With snort the basic setup is fairly simple, once you've decided how many "sensors" you want, and where you want to place them.

The real hard work comes in setting up appropriate rules.

If you're not careful you'll get too many false positives by having rules that will match incoming IIS exploit attempts - even though you're only using Apache for example.

As the rules are going to be mostly site and location specific that's something that would be problem even if I were to writeup something .. I guess.

Steve
--


Username:Anonymous
Title:
Your Comment:

Posting Format:

 

Inappropriate comments will be removed.

Some help on entry formatting is available

User Login

Username:

Password:

[ Advanced Login ]

Register Account

Quick Site Search