Slashdot Mirror


New Open Source Intrusion Detector Suricata Released

richrumble writes "The OISF has released the beta version of the Suricata IDS/IPS engine: The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. This new Engine supports Multi-Threading, Automatic Protocol Detection (IP, TCP, UDP, ICMP, HTTP, TLS, FTP and SMB! ), Gzip Decompression, Fast IP Matching and coming soon hardware acceleration on CUDA and OpenCL GPU cards."

1 of 44 comments (clear)

  1. Re:Innovation by Monkeedude1212 · · Score: 0, Troll

    This engine is unique in the fact that it will determine your external IP assigned by your ISP, and then use that to determine what city you live in. It will then automagically search the local job banks for the best private security professionals, and position one every 10 meters across your network.

    It also has some very special features that allow you to choose exactly how you want your security team to look like, if you prefer mustaches or aviator sunglasses, that kind of stuff.

    Also, forget Automatic Protocol Detection, they're planning on implementing Brute Force Protocol Detection. Instead of reading the headers or any other piece of data, it merely tries iterating ALL of the data through EVERY kind of protocol. This way, you can secretly encode messages using one protocol (Say SMTP) but send it using a different one (Say HTTP). That way your ACTUAL information can stay completely secure while the hackers are stuck with some Bogus Data they think they broke the encryption for.