[Snort-devel] IDS evaluation

Antonatos Spiros antonat at ...1999...
Tue May 27 07:19:16 EDT 2003


Some recent work (in progress) on IDS evaluation with emphasis on string
matching algorithms is described in:

 

http://www.cis.upenn.edu/~anagnost/papers/idsperf-draft-may03.ps

 

Some of the main points are that you get very different results
depending on test traffic, hardware setup, and that one should be
cautious when using uniformly random payloads and "synthetic" rulesets
for benchmarking.

 

We'd appreciate comments/feedback on this. thanks!

 

Antonatos Spiros

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20030527/3794beef/attachment.html>


More information about the Snort-devel mailing list