In search of security event standards

| Posted in General Techologies

Did I post this one before? I am not sure any of the companies mentioned in the article are actually doing anything to define a new log format standard, other than maybe IBM’s Common Event Infrastructure and Common Base Event format. But even IBM’s making a single log extremely complicated. Security point products such as [...]

More...
January 3rd, 2005 | Jian Zhen | No Comments

Open Source Log Analysis Tools

| Posted in General Techologies

Here’s a list of open source log analysis tools that I know of. Lire by LogReport.org Simple Event Correlator (SEC) Apache Chainsaw Sisyphus toolkit Open Source Security Information Management Logsurfer LMon Automated Incident Reporting Crusoe Correlated Intrusion Detection System Monitoring, Intrusion Detection, [and] Administration System SGUIL Please let me know if you know of others [...]

More...
December 31st, 2004 | Jian Zhen | No Comments

sisyphus toolkit

| Posted in General Techologies

Welcome to the sisyphus toolkit! Version 0.9beta (Nov 5, 2004) This is a snapshot of some tools created by a project with the following charter: With the specific goal of increasing supercomputer RAS (reliability, availability, and serviceability), we intend to produce a machine-learning analysis system which enables content-novice analysts to efficiently understand evolving trends, identify [...]

More...
December 31st, 2004 | Jian Zhen | No Comments

Amazon/Red Cross Donation

| Posted in General Techologies

Amazon has setup a great way for everyone to donate cash to the Indian ocean tsunami victims. As of this moment, amazon users have donated over $6.6 million!! Wikipedia provides up-to-date information on the event. The death toll from the Indian Ocean Earthquake and subsequent tsunamis on December 26 has exceeded 130,000 people in 13 [...]

More...
December 30th, 2004 | Jian Zhen | No Comments

LMon

| Posted in General Techologies

Anders Nordby released his new tool, LMon. LMon is a package for near real-time monitoring of logs, sending e-mail alerts upon known (rule hits) or unknown data (rule misses). Features: – Buffer multiple rule hits within a given interval, cap at a given maximum number of lines, wait for a given interval before sending next [...]

More...
December 29th, 2004 | Jian Zhen | No Comments

War on Intellectual Property Leakage

| Posted in General Techologies

Approximately sixty to eighty percent of your company’s asset is defined as Intellectual Properties, or IP. IP includes everything from patents, trademarks, brands, trade secrets, designs, architectures, copyrights, algorithms, software code, hardware schematics, inventions, business processes, and many other intangible assets. These are properties that may or may not have no physical presence. They exist [...]

More...
December 28th, 2004 | Jian Zhen | No Comments

Network Intelligence Knowledge Base

| Posted in General Techologies

I was searching the web for information on Cisco IDS and found this link. Obviously it’s not available as it has been password protected by Network Intelligence. However, if you use the Google Cache, you are able to see the content at the time Google indexed it. A bit more poking around, I found a [...]

More...
December 27th, 2004 | Jian Zhen | No Comments

Banks and Hospitals

| Posted in General Techologies

This is for you stats buffs who are doing market research. 23% of US banks are planning major updates to infrastructure About 23% of all US banks are planning major initiatives related to core banking systems, according to Gartner. US banks lag behind financial institutions in other parts of the world such as Europe, where [...]

More...
December 25th, 2004 | Jian Zhen | No Comments

Advanced Visualization

| Posted in General Techologies

Terry Kim had a short piece on Beyond the Pie Chart. I agree w/ him to some extent. Most vendors put visualization up for the wow factor and not necessary for anything useful. He then asked the question Who is the leader in advanced visualization? I am not sure I can answer that question but [...]

More...
December 22nd, 2004 | Jian Zhen | 1 Comment

Happy Holidays!

| Posted in General Techologies
More...
December 21st, 2004 | Jian Zhen | No Comments