Overview of Intrusion Detection Systems

We are presenting an examination and demonstration of current and past tools in intrusion detection. We plan to present this on two separate days. February 13th, at 1pm to 3pm, will be a technical presentation of the tools, and their uses. February 14th, at 1pm to 2pm, will be a higher level overview of these tools, and how they contribute to our security footprint.

The current outline for our presentation on both days is as follows:

• Overview of Intrusion Detection Systems
  • Snort
  • portsentry
  • clog
• Overview of Intelligent Agents, and Agent Based Technologies
  • AAFID
  • ZEUS
  • AgentTech and InfoSleuth
• Using Zeus to Wrap IDS and NIDS
• Participation in, and Usage of, SFClean (from Security Focus)

Please attend the session you feel would be of interest to you. Both sessions will take place in the lab. A brief write up of the results will appear on the web site on February 16th. An additional overview session will be scheduled on Tuesday, the 20th, for those unable to attend Wednesday's session.