Re: Using Snort to find creditcard data?
Stefano Zanero <[email protected]>
| Newsgroups | gmane.comp.security.ids |
|---|---|
| Organization | Secure Network S.r.l. |
| Message-ID | <[email protected]> |
[email protected] wrote: > Would it be possible to write a Snort rule that triggers on possible creditcard numbers and how would it look like? > PCI standars says that all creditcard data should be encrypted, It woild be nice to verify that no card data shows up where it shouldn't... Something like http://regexlib.com/REDetails.aspx?regexp_id=340 In a PCRE field ? Stefano ------------------------------------------------------------------------ Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw to learn more. ------------------------------------------------------------------------