Announcement: ACID database logging optimization

Curt Freeland <[email protected]> Fri, 05 Dec 2003 11:02:30 -0500
Newsgroups gmane.comp.security.papers
Message-ID <[email protected]>
The Spanids research group at the University of Notre Dame is proud to
release an exciting optimization of the alert logging performance of Snort
with ACID. We found that in attack situations, Snort may generate alerts
at a rate that exceeds the logging capabilities of the database. We
implemented an optimization in the database plugin that reduces the number
of database operations and improves alert logging performance by over 20%.
We have made the software as well as a technical report that describes the
optimization and evaluation available on our web page.

You are welcome to publish the tech report on your web site. Also, feel 
free to link to our web page (http://www.cse.nd.edu/~spanids/index.php), 
or to link directly to the sub page describing this optimization
(http://www.cse.nd.edu/~spanids/software.php). 

You can get the PDF technical report regarding this optimization
via the URL as well.

--curt (for Lambert, and Matt)

Curt Freeland ([email protected]) GCIA #0223
Associate Professional Specialist
Computer Science and Engineering Department
323A Cushing Hall,  The University of Notre Dame
Voice: (574) 631-5893 / FAX: (574) 631-9260   <---(NEW AREA CODE!!)