[Prelude Hybrid IDS] #216: mod_security modifications
"Prelude Hybrid IDS" <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.devel |
|---|---|
| Message-ID | <[email protected]> |
#216: mod_security modifications
-------------------------+--------------------------------------------------
Reporter: gegomez | Owner: gegomez
Type: defect | Status: new
Priority: normal | Milestone: Prelude-LML 0.9.9
Component: prelude-lml | Version: 0.9
Severity: normal | Keywords:
-------------------------+--------------------------------------------------
Correct the following:
* Place the unique_id data in the correct field (remove
classification.ident, most likely belongs in additional_data).
* Correct classification.text where action taken is included (this should
be in the action field); remove the action taken to improve correlation
capabilities based on classification.text independent of action taken.
* Audit ruleset for mod_security 2.0
--
Ticket URL: <https://trac.prelude-ids.org/ticket/216>
Prelude Hybrid IDS <http://www.prelude-ids.org>
The Prelude Hybrid Intrusion Detection System suite
_______________________________________________
Prelude-devel site list
[email protected]
http://www.prelude-ids.org/mailman/listinfo/prelude-devel