Intrusion detection system

Intrusion detection system

[Marco Stornelli]

Hi,

I have to design a network application on a board. I have to use an 
IDS/IPS system. Have you got any suggestions? Is there a good solution 
about an IDS system on embedded linux?

Thanks.

Regards,

-- 
Marco Stornelli
Embedded Software Engineer
CoRiTeL - Consorzio di Ricerca sulle Telecomunicazioni
http://www.coritel.it

marco.stornelli@coritel.it
+39 06 72582838

Re: Intrusion detection system

[Kumar Gala]

On Aug 5, 2008, at 3:51 AM, Marco Stornelli wrote:

> Hi,
>
> I have to design a network application on a board. I have to use an  
> IDS/IPS system. Have you got any suggestions? Is there a good  
> solution about an IDS system on embedded linux?

Have you looked at http://www.snort.org/?

I know Freescale has some embedded PPC products w/HW pattern matching  
acceleration that are geared towards helping improving IDS/IPS.

- k

Re: Intrusion detection system

[Marco Stornelli]

Kumar Gala ha scritto:
> 
> On Aug 5, 2008, at 3:51 AM, Marco Stornelli wrote:
> 
>> Hi,
>>
>> I have to design a network application on a board. I have to use an 
>> IDS/IPS system. Have you got any suggestions? Is there a good solution 
>> about an IDS system on embedded linux?
> 
> Have you looked at http://www.snort.org/?

Yes I've already know it, but I compiled it and I've got a file of 8MB 
and I need even several libraries, I wondered if there was something 
more lither.

> 
> I know Freescale has some embedded PPC products w/HW pattern matching 
> acceleration that are geared towards helping improving IDS/IPS.
> 
> - k
> 
Can you give me some reference about it?

-- 
Marco Stornelli
Embedded Software Engineer
CoRiTeL - Consorzio di Ricerca sulle Telecomunicazioni
http://www.coritel.it

marco.stornelli@coritel.it
+39 06 72582838

Re: Intrusion detection system

[Marco Stornelli]

Marco Stornelli ha scritto:
> Kumar Gala ha scritto:
>>
>> On Aug 5, 2008, at 3:51 AM, Marco Stornelli wrote:
>>
>>> Hi,
>>>
>>> I have to design a network application on a board. I have to use an 
>>> IDS/IPS system. Have you got any suggestions? Is there a good 
>>> solution about an IDS system on embedded linux?
>>
>> Have you looked at http://www.snort.org/?
> 
> Yes I've already know it, but I compiled it and I've got a file of 8MB 
> and I need even several libraries, I wondered if there was something 
> more lither.

oops, I meant more lighter.

> 
>>
>> I know Freescale has some embedded PPC products w/HW pattern matching 
>> acceleration that are geared towards helping improving IDS/IPS.
>>
>> - k
>>
> Can you give me some reference about it?
> 


-- 
Marco Stornelli
Embedded Software Engineer
CoRiTeL - Consorzio di Ricerca sulle Telecomunicazioni
http://www.coritel.it

marco.stornelli@coritel.it
+39 06 72582838

Re: Intrusion detection system

[Kumar Gala]

On Aug 5, 2008, at 8:28 AM, Marco Stornelli wrote:

> Kumar Gala ha scritto:
>> On Aug 5, 2008, at 3:51 AM, Marco Stornelli wrote:
>>> Hi,
>>>
>>> I have to design a network application on a board. I have to use  
>>> an IDS/IPS system. Have you got any suggestions? Is there a good  
>>> solution about an IDS system on embedded linux?
>> Have you looked at http://www.snort.org/?
>
> Yes I've already know it, but I compiled it and I've got a file of  
> 8MB and I need even several libraries, I wondered if there was  
> something more lither.

I'm not aware of anything.  My understand is IDS/IPS is simple and  
requires a fair amount of space.

>> I know Freescale has some embedded PPC products w/HW pattern  
>> matching acceleration that are geared towards helping improving IDS/ 
>> IPS.
>> - k
> Can you give me some reference about it?

http://tinyurl.com/3ue6rw
http://tinyurl.com/5qg4cr

- k