[Snort-users] Meet Marty Roesch in NY - Learn the Future of Snort!

Jennifer Talcott jennifer.talcott at ...1935...
Mon Oct 10 18:49:59 EDT 2005


There is a DC area group, and you can find more information at
http://snort.nisec.net/. We would be happy to host a meeting at our
headquarters and if other folks are interested, send us an e-mail at
snort_groups at ...1935... and let us know! Thanks!


-----Original Message-----
From: Randal T. Rioux [mailto:randy at ...13561...] 
Sent: Monday, October 10, 2005 6:38 PM
To: Jennifer Talcott
Cc: Snort-Users at ...1973... Sourceforge. Net
Subject: Re: [Snort-users] Meet Marty Roesch in NY - Learn the Future of

Is there a DC area users group? I live down the street from Sourcefire
in Columbia, MD... we could meet there! :-)

Jennifer Talcott wrote:
> Hey Everyone,
> Due to an increasing amount of interest recently in forming a New York
> Snort User Group, we've decided to invite all of the users in the area to
> join Marty and the team for an upcoming presentation. IBM has offered to
> sponsor a meeting where Marty will be discussing Target-based IDS: The
> Future of the Industry. Join us for great Snort conversation, drinks, and
> (of course) Snort shwag!
> Presentation Topic:
> First generation solutions, including IPS, suffer from lack of information
> that leads to ambiguity - sensors operate with no compositional knowledge
> the network components they are defending, leading to false
> positives/negatives and evasions. To solve this, Sourcefire is developing
> target-based detection engine that auto-configures itself in real-time
> on the attributes of the targeted system. This methodology requires a
> continuous feed of all the attribute data for all the devices on the
> protected network, even as it evolves - information provided by Sourcefire
> RNA. The system will work by feeding attribute data from RNA, enabling
> policy application to occur at a per-flow level of granularity, which will
> maximize the blocking capability while minimizing chances of accidental
> as a result of false positives or misapplication of policies to improper
> targets.
> Date and Time:
> November 10th, 2005
> 5:30 - 7:00 PM
> Cocktails Afterward - Location TBA
> Location:
> IBM New York City Office
> 590 Madison
> New York, NY
> Register here: http://www.snort.org/registrations/rsvp.html
> Please note: RSVP is required for building access
> Questions or comments can be directed to snort-marketing at ...3990...
> -------------------------------------------------------
> This SF.Net email is sponsored by:
> Power Architecture Resource Center: Free content, downloads, discussions,
> and more. http://solutions.newsforge.com/ibmarch.tmpl
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=ort-users

More information about the Snort-users mailing list