Re: Attack scenarios
"Sebastien Tricaud" <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.user |
|---|---|
| Message-ID | <[email protected]> |
On Tue, May 13, 2008 at 2:51 PM, Reinhard Fellner <[email protected]> wrote: > Hello Hello Reinhard, > > Does anyone know scenarios, where a new alert can only be found, when > looking on the hids and nids alerts simultaneously? > I guess you would be interested to read: http://www.wallinfire.net/files/correlation-womi-paper.pdf and the slides: http://www.wallinfire.net/files/correlation-womi-cansec2008.pdf Bye, Sebastien. _______________________________________________ Prelude-user site list [email protected] http://lists.prelude-ids.org/mailman/listinfo/prelude-user