[Snort-devel] IDS evaluation

antonat antonat at ...1996...
Sun May 25 16:54:03 EDT 2003


Some recent work (in progress) on IDS evaluation with emphasis on string
matching algorithms is described in:

http://www.cis.upenn.edu/~anagnost/papers/idsperf-draft-may03.ps

Some of the main points are that you get very different results depending
on test traffic, hardware setup, and that one should be cautious when using
uniformly random payloads and "synthetic" rulesets for benchmarking.

We'd appreciate comments/feedback on this. thanks!


Antonatos Spyros




More information about the Snort-devel mailing list