Re: Fwd: New York City Snort Users Group - March 1st at 6:00 PM

From: Damien Hull <dhull@digitaloverload.net>
Date: Wed Feb 21 2007 - 17:06:46 AKST

When I started out in IT and networking I thought the cool place to be
was network security. My first working Linux box was a Firewall. At some
point I found out about Snort and thought it might be cool to play with.
Intrusion detection ( what Snort does) is cool. Or so I thought.

The short story is that I logged so much data I didn't know what to do
with it. People are knocking but it doesn't mean their a true threat.
Shortly after my bad experience with Snort the industry changed. Instead
of just listening for an attack why not listen and then respond. Thats
when the IT industry moved to intrusion prevention instead of intrusion
detection.

I think the new model is much better. I'm not sure where that leaves
Snort. The last time I played with it was maybe 01.

wade adams wrote:
> I can not go but thought i would put this out for anyone interested.
> ---------- Forwarded message ----------
> From: snortmail@sourcefire.com <snortmail@sourcefire.com>
> Date: Feb 21, 2007 9:24 AM
> Subject: New York City Snort Users Group - March 1st at 6:00 PM
> To: ICEMAN5276394@gmail.com
>
> The New York Snort Users group will be meeting on March 1st at 6:00 PM at
> CipherTechs, Inc. in the financial district.
>
> Jason Brvenik from Sourcefire will be on hand to lead a round table
> discussion on improving network security using Snort and answer your
> questions. Refreshments will be provided along with some free Snort swag and
> a chance to win a free personal use subscription to Sourcefire VRT Certified
> Rule Updates.
>
> Details:
>
> March 1st - 6:00 PM to 8:00 PM
> CipherTechs, Inc
> 55 Broadway
> 11th Floor
> New York, New York
>
> Please keep in mind that the meeting is in a secure building - so
> advance registration will be required. You can register by visiting
> http://snort.org/registrations/rsvp.html.
>
> - Mike
>
>
> ---------
> To unsubscribe, send email to <aklug-request@aklug.org>
> with 'unsubscribe' in the message body.
>
>

---------
To unsubscribe, send email to <aklug-request@aklug.org>
with 'unsubscribe' in the message body.
Received on Wed Feb 21 17:07:13 2007

This archive was generated by hypermail 2.1.8 : Wed Feb 21 2007 - 17:07:13 AKST