Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options questions only not deleted user 9778

Intrusion Detection System, a system for detecting and alerting based on behavior.

5 votes
1 answer
4k views

Bench marking Snort and other IDS/IPS

I am looking for facts and figures of research or surveys done which have bench-marked Snort with other IDS/IPS on various parameters like overall performance, accuracy, speed, documentation, scalability …
pnp's user avatar
  • 1,808
5 votes
3 answers
3k views

Published data sets for IDS/IPS evaluation

I am looking for data sets published by researchers or freelancers which can be used for the purpose of IDS/IPS testing and evaluations. …
pnp's user avatar
  • 1,808
8 votes
6 answers
4k views

How could malware like Stuxnet be detected?

Thus it managed to go under the radar and would typically go unnoticed by IDS/Firewalls. …
pnp's user avatar
  • 1,808
9 votes
1 answer
3k views

How can an admin choose which Snort rules to enable?

The purpose is to configure Snort as an IDS to monitor network activity, and alert against the standard set of things an IDS should alert against--> buffer overflow attacks, injection attacks, port scans …
pnp's user avatar
  • 1,808
2 votes
4 answers
2k views

Detecting malware hidden in P2P traffic

Consider a network situation involving (only) Peer to Peer traffic in medium sized network. For the sake of convenience, a simple P2P application like DC++ may be assumed, although I am aiming at a …
pnp's user avatar
  • 1,808