[Snort-users] Meet Marty Roesch in NY - Learn the Future of Snort!

Randal T. Rioux randy at ...13561...
Mon Oct 10 15:39:00 EDT 2005


Is there a DC area users group? I live down the street from Sourcefire
in Columbia, MD... we could meet there! :-)


Jennifer Talcott wrote:
> Hey Everyone,
> 
> Due to an increasing amount of interest recently in forming a New York City
> Snort User Group, we've decided to invite all of the users in the area to
> join Marty and the team for an upcoming presentation. IBM has offered to
> sponsor a meeting where Marty will be discussing Target-based IDS: The
> Future of the Industry. Join us for great Snort conversation, drinks, and
> (of course) Snort shwag!
> 
> Presentation Topic:
> First generation solutions, including IPS, suffer from lack of information
> that leads to ambiguity - sensors operate with no compositional knowledge of
> the network components they are defending, leading to false
> positives/negatives and evasions. To solve this, Sourcefire is developing a
> target-based detection engine that auto-configures itself in real-time based
> on the attributes of the targeted system. This methodology requires a
> continuous feed of all the attribute data for all the devices on the
> protected network, even as it evolves - information provided by Sourcefire
> RNA. The system will work by feeding attribute data from RNA, enabling
> policy application to occur at a per-flow level of granularity, which will
> maximize the blocking capability while minimizing chances of accidental DoS
> as a result of false positives or misapplication of policies to improper
> targets.
> 
> Date and Time:
> November 10th, 2005
> 5:30 - 7:00 PM
> Cocktails Afterward - Location TBA
> 
> Location:
> IBM New York City Office
> 590 Madison
> New York, NY
> 
> Register here: http://www.snort.org/registrations/rsvp.html
> Please note: RSVP is required for building access
> 
> Questions or comments can be directed to snort-marketing at ...3990...
> 
> 
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by:
> Power Architecture Resource Center: Free content, downloads, discussions,
> and more. http://solutions.newsforge.com/ibmarch.tmpl
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=ort-users
> 
> 
> 




More information about the Snort-users mailing list