Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: Vulnerability & Exploit Signatures |
|---|---|
| Date: | Thu, 16 Jun 2005 10:31:19 -0500 |
<shameless plug> Also consider the Bleeding Edge Snort project (www.bleedingsnort.com) Our sigs are from the community and BSD licensed. So they are free for use in commercial products, we just hope companies using them will contribute back to the community and mention to their customers that some of their sigs come from us. We do have many commercial products using these sigs, and most of the firms we're aware of are very active in the security community and the bleeding snort community. Some of those firms are sponsors of our project. Any others are welcome to become sponsors as well. Despite our warnings that the sigs are crude or unpolished, any problems are worked out within minutes, usually before posting even. </shameless plug> Matt Kelly Dowd wrote:
I doubt there is any licensing of base signatures between vendors (signature engines vary greatly between products, you can't just 'use' another products sigs). You will find that some developers look at existing signature sets to get 'ideas', but it's far from a one-for-one copy. Companies must develop their own sigs just like they develop their own appliances... it's a total package. -Kelly D. On 6/14/05, Jackson Yu <jackson.yu@earthlink.net> wrote:
-- -------------------------------------------- Matthew Jonkman, CISSP Senior Security Engineer Infotex 765-429-0398 Direct Anytime 765-448-6847 Office 866-679-5177 24x7 NOC my.infotex.com www.offsitefilter.com www.bleedingsnort.com -------------------------------------------- NOTICE: The information contained in this email is confidential and intended solely for the intended recipient. Any use, distribution, transmittal or retransmittal of information contained in this email by persons who are not intended recipients may be a violation of law and is strictly prohibited. If you are not the intended recipient, please contact the sender and delete all copies. -------------------------------------------------------------------------- Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more. --------------------------------------------------------------------------
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Re: Vulnerability & Exploit Signatures, M. Dodge Mumford |
|---|---|
| Next by Date: | Re: Vulnerability & Exploit Signatures, MadHat |
| Previous by Thread: | Re: Vulnerability & Exploit Signatures, Kelly Dowd |
| Next by Thread: | Re: Vulnerability & Exploit Signatures, MadHat |
| Indexes: | [Date] [Thread] [Top] [All Lists] |