Intrusion Detection Systems: RE: kernel implementations

[drellis () us ibm com (drellis () us ibm com)]

Archive: http://msgs.securepoint.com/ids
FAQ: http://www.ticm.com/kb/faq/idsfaq.html
IDS: http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
UNSUBSCRIBE: email "unsubscribe ids" to majordomo () uow edu au

     So, I suppose you, too, are only implementing a network-based IDS.
Well, what kind of throughput is your system able to effectively handle?

"Udaya Krishna" <udaya_krishna () 123india com> on 07/21/2000 03:18:36 AM

To:   Daniel R Ellis/Austin/IBM () IBMUS, <ids () uow edu au>
cc:
Subject:  RE: kernel implementations

Hi Ellis,

     We are trying to implement the IDS as an embedded system using Network
Processor(SiTera).

Udaya Krishna
India
ukumar () ipolicynet com
Ph: (91)118-4592203

-----Original Message-----
From: owner-ids () uow edu au [mailto:owner-ids () uow edu au]On Behalf Of
drellis () us ibm com
Sent: Friday, July 21, 2000 1:38 AM
To: ids () uow edu au
Subject: IDS: kernel implementations

Archive: http://msgs.securepoint.com/ids
FAQ: http://www.ticm.com/kb/faq/idsfaq.html
IDS: http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
UNSUBSCRIBE: email "unsubscribe ids" to majordomo () uow edu au

-

    All of the applications (and research) that I have seen have put ID in
a user-level application.  Has anybody looked into including ID
functionality in the kernel?
_______________
Dan Ellis
UC Santa Barbara
ellisd () cs ucsb edu

Carpe Diem