[ISN] DHS, vendors unveil open source intrusion detection engine

http://www.computerworld.com/s/article/9179436/DHS_vendors_unveil_open_source_intrusion_detection_engine

By Jaikumar Vijayan
Computerworld
July 20, 2010

The Open Information Security Foundation (OISF), a group funded by the 
U.S Department of Homeland Security (DHS) and several security vendors, 
this week released an open source engine built to detect and prevent 
network intrusions.

The somewhat oddly named Suricata 1.0 engine is touted as a replacement 
for the 12-year-old Snort open source technology that over the years has 
emerged as a sort of de facto standard for detecting and preventing 
intrusions.

Snort currently claims close to 300,000 registered users and over 4 
million downloads. Nearly 100 vendors currently have added Snort to 
network security devices. Earlier this month Amazon announced that it 
has selected Snort to deliver IPS protection for its Web services 
customers.

OISF president Matt Jonkman said that Suricata is designed to address 
some limitations in the older Snort tool. For example, Suricata's 
multi-threaded architecture can support high performance multi-core and 
multiprocesser systems, Jonkman said. Snort is designed for the 
single-processor systems that dominated the tech world when it was 
created.

[...]


_________________________________________________________________
Attend Black Hat USA 2010, hosted at Caesars Palace in Las Vegas, Nevada
July 24-29th, offering over 60 training sessions and 11 tracks of Briefings
from security industry elite. To sign up visit http://www.blackhat.com