Wanted Dead or Alive: Snort Intrusion Detection System

With the status of intrusion detection systemÂ’s (IDS) future doubted by some and supported by others, the steps involved in building a distributed IDS are questioned. Issues with deployment and implementation are outlined in summary. Review of currently available documentation and setup of systems, while updating applications required for the builds, are conducted to determine what problems may be encountered and if solutions or workarounds exist. A question of what additional security measures may be performed is addressed, along with a means to duplicate systems inexpensively.

Tags:

Read the complete paper at SANS