First page Back Continue Last page Summary Graphics
Application Links (cont.)
Intrusion Detection - Network-based
- Shadow - Distributed by the Naval Surface Warfare Center, Shadow is a Network IDS. Shadow uses a number of "sensors" placed around the network. These sensors collect traffic using tcpdump and ships it off at intervals to an analysis station. The analysis station then checks for malicious patterns which indicate attacks.