DEF CON 9 - Thomas J. Munn - Using Open BSD, snort, Linux, and a few other tricks *
Channel: DEFCONConference
Date: 2015-11-17

Thomas J. Munn - Using Open BSD, snort, Linux, and a few other tricks to set up a transparent, ACTIVE Ids
Basically I will cover: How to set up Snort Sensor in Openbsd. - How to use Perl & Rules to actively adapt rules to attacks, while keeping yourself from being "DOSSED" - How to use ACID to make logs more easily accessible, and analyzed, - How to Use database portion to look at historical attack trends and react appropriately. - How to set up "safe" management segment on your network that is both accessible to you, but hard for "them" to get into.