Differences

This shows you the differences between two versions of the page.

--- en:index [25.04.2016 11:55]
ph@cesnet.cz Fix several typos
+++ en:index [25.04.2016 15:34]
ph@cesnet.cz Fix typo
@@ Line 3: / Line 3: @@
 **The specification is nearly definitive. We expect only minor changes.**
-//IDEA// stands for //Intrusion Detection Extensible Alert//. Even though there exists a variety of models for communication between honeypots, agents, detection probes, none of them is really used because of various limitations for general usage. The is attempt to define nowadays requirements and propose foundations for viable solution for security event model, taking into consideration existing formats, their benefits and drawbacks.
+//IDEA// stands for //Intrusion Detection Extensible Alert//. Even though there exists a variety of models for communication between honeypots, agents, detection probes, none of them is really used because of various limitations for general usage. The IDEA is an attempt to define nowadays requirements and propose foundations for viable solution for security event model, taking into consideration existing formats, their benefits and drawbacks.
 Many administrators run various types of intrusion detection systems, be it honeypots, analysers of systems or system logs, traffic analysers, netflow probes or others. Multitude of data is generated every day, however most of it stays local. Administrators sieve out what is relevant for them and rest of the data goes mostly unused.

Links