Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Focus-IDS
[Top] [All Lists]

Re: Vulnerability & Exploit Signatures

Subject: Re: Vulnerability & Exploit Signatures
Date: Thu, 16 Jun 2005 10:31:19 -0500
<shameless plug>

Also consider the Bleeding Edge Snort project (www.bleedingsnort.com)

Our sigs are from the community and BSD licensed. So they are free for
use in commercial products, we just hope companies using them will
contribute back to the community and mention to their customers that
some of their sigs come from us.

We do have many commercial products using these sigs, and most of the
firms we're aware of are very active in the security community and the
bleeding snort community. Some of those firms are sponsors of our
project. Any others are welcome to become sponsors as well.

Despite our warnings that the sigs are crude or unpolished, any problems
are worked out within minutes, usually before posting even.

</shameless plug>

Matt

Kelly Dowd wrote:
I doubt there is any licensing of base signatures between vendors
(signature engines vary greatly between products, you can't just 'use'
another products sigs).   You will find that some developers look at
existing signature sets to get 'ideas', but it's far from a
one-for-one copy.  Companies must develop their own sigs just like
they develop their own appliances... it's a total package.

-Kelly D.

On 6/14/05, Jackson Yu <jackson.yu@earthlink.net> wrote:



-- 
--------------------------------------------
Matthew Jonkman, CISSP
Senior Security Engineer
Infotex
765-429-0398 Direct Anytime
765-448-6847 Office
866-679-5177 24x7 NOC
my.infotex.com
www.offsitefilter.com
www.bleedingsnort.com
--------------------------------------------


NOTICE: The information contained in this email is confidential
and intended solely for the intended recipient. Any use,
distribution, transmittal or retransmittal of information
contained in this email by persons who are not intended
recipients may be a violation of law and is strictly prohibited.
If you are not the intended recipient, please contact the sender
and delete all copies.

--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from 
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
--------------------------------------------------------------------------

<Prev in Thread] Current Thread [Next in Thread>