Announcement: ACID database logging optimization
Curt Freeland <[email protected]> Fri, 05 Dec 2003 11:02:30 -0500
| Newsgroups | gmane.comp.security.papers |
|---|---|
| Message-ID | <[email protected]> |
The Spanids research group at the University of Notre Dame is proud to release an exciting optimization of the alert logging performance of Snort with ACID. We found that in attack situations, Snort may generate alerts at a rate that exceeds the logging capabilities of the database. We implemented an optimization in the database plugin that reduces the number of database operations and improves alert logging performance by over 20%. We have made the software as well as a technical report that describes the optimization and evaluation available on our web page. You are welcome to publish the tech report on your web site. Also, feel free to link to our web page (http://www.cse.nd.edu/~spanids/index.php), or to link directly to the sub page describing this optimization (http://www.cse.nd.edu/~spanids/software.php). You can get the PDF technical report regarding this optimization via the URL as well. --curt (for Lambert, and Matt) Curt Freeland ([email protected]) GCIA #0223 Associate Professional Specialist Computer Science and Engineering Department 323A Cushing Hall, The University of Notre Dame Voice: (574) 631-5893 / FAX: (574) 631-9260 <---(NEW AREA CODE!!)