Tab 1

Using Open Source combining SNORT and BASE. This combination is capable of performing real-time traffic analysis and packet logging on IP networks. This method can perform protocol analysis, content searching/matching and can be used to detect a variety of attacks and probes, including buffer overflows, stealth port scans, CGI attacks, SMB probes and OS fingerprinting attempts. SNORT uses flexible rule language to describe traffic that should be collected or passed, as well as a detection engine that utilises a modular plug-in architecture. SNORT has a real-time alerting capability incorporating alerting mechanisms for SYSlog, user specified file and a UNIX socket or WinPopup messages to Windows clients. BASE can be used as a front end for the SNORT IDS system
back to menu

Tab 2

Alternatively we can offer Cisco IDS, the most widely deployed IDS system in the world. Providing complete intrusion protection, Cisco IDS delivers a comprehensive security solution for combating unauthorised intrusions, malicious internet worms, bandwidth and e-business application attacks.

Cisco IDS is a dynamic security component of the Cisco end-to-end security product portfolio. Cisco IDS has been engineered from the ground up to support the broadest range of network deployments, from small businesses to the largest enterprise environments and service providers demanding high-speed, resilient solutions.

Cisco IDS utilises highly innovative and sophisticated detection techniques including stateful pattern recognition, protocol parsing, heuristic detection, and anomaly detection, that provide comprehensive protection from a variety of both known and unknown cyber threats.
back to menu