Bleeding Edge of Snort

M Edwards

Windows IT Pro

InstantDoc ID #44208

Rating:

(0)

A new Web site, The Bleeding Edge of Snort, is available for those who use Snort IDS. Among other things, the site offers new Snort rules that aren't necessarily part of the regular Snort rules distribution.

For example, there are intrusion detection rules for the issues that were recently discovered in ASP.NET. There are also rules to detect certain denial of service (DoS) attacks against Cisco routers, DoS attacks against Microsoft SMS, buffer overflows in Adobe Acrobat Reader, almost two dozen rules that detect exploits against Internet Explorer (IE), over a dozen rules to detect exploits against Internet Information Server (IIS), rules for Microsoft SQL Server exploits, rules to help protect against various file downloads such as registry files, executables, DLLs, and a much more. The Snort rules are freely available to the public and new rules can be contributed by anyone.

The site is run by numerous contributors and sponsored by Vortek Hosting, infotex, and Applied Watch Technologies. Also available at the site are message boards, news feeds, new files announcements, and more.

Want to use this article? Click here for options!

You must log on before posting a comment.

Are you a new visitor? Register Here

How can you view two fax lines in Windows Server under Fax and Scan?
Hi everyone. I have been the Network Admin at a doctors office since December. We are ru...
Need advice about old box with expensive software
I wanted to post this on a win 98 forum but it said it wasn't available. But I think it fits here al...
Anti-Virus Solutions on my main DC
Hi All, I am trying to find a good anti-virus solution for one of my client's new server 2008 6...
Must-Have Certs. Vs. Nice-to-have Certs
Hey, Found this article on nice-to-have certs. vs. must-have certs. Wondering what you all thin...
Task bar problem
Hi, I've a problem with the task bar. The task bar gets overlapped/hidden when i open any applicatio...
How to mirror files between two servers in realtime?
It might be more of an IIS/FTP question... Anyway, I'm considering deploying two web servers, to mi...

White Papers

Get your Windows 7 deployment off to the right start by implementing PC lockdown. A locked-down environment is easier and cheaper to support since users are less likely to make unnecessary changes to the core system configuration - read more here!

Essential Guides

Is your iSCSI "lossy"? The reality is that most off-the-shelf Ethernet hardware deployed for iSCSI can lose packets, resulting in slow performance or application downtime. Learn how to assess your current iSCSI infrastructure and engineer an advanced iSCSI SAN infrastructure.

Web Seminars

What's the best way to keep your network safe from malware? In this web seminar, security expert Greg Shields suggests an alternative method to the traditional blacklisting approach that is common with anti-virus and anti-malware solutions.

eLearning Series

We bring the experts direct to you to share their real-world perspective and expertise. During each event, three sessions stream in real time, so you can learn, ask questions, and get solutions.
Upcoming event: Getting the Most with Exchange 2010 with Paul Robichaux

Cloud IT Pro DevProConnections Left-Brain Mobile Dev Pro SharePoint Pro SQL Server Pro SuperSite for Windows Windows IT Pro

Home About Us Advertise Customer Service Privacy Statement Subscribe/Renew Terms Of Use

Windows is a trademark of the Microsoft group of companies. Windows IT Pro is used by Penton Media Inc. under license from owner.

Get Newsletters

Subscribe Now!