LinuxWorld 2005
Sourcefire arraged for a Snort booth in the .org pavilion of this year's LinuxWorld show in San Francisco, CA. We invited folks from BASE and Sguil to come show off their great consoles. The team included:
From Sguil:
- David Bianco, Vorant Network Security
From BASE:
- Joel Esler, now with Sourcefire's Product Services Team
From Snort
- Jason Billings - Manager, Sourcefire Security Engineering
- Nigel Houghton - Research Engineer, Sourcefire VRT
- Marty Roesch - Founder and CTO of Sourcefire and creator of Snort
- Jennifer Steffens - Director Product Management - Snort, Sourcefire
Check out some photos from the show.
|
The Snort Team are some of Tux's biggest fans. From left to right Nigel, Jennifer, Tux, Jason (back) and Joel. |
|
This year's .org pavilion was bigger and badder than previous years. See us in the front row, second booth. |
|
We met Brandon Hobary at the show - the youngest Snorthead we have met yet. At 14, Brandon already has Snort protecting his family's network. You can't tell but that shirt is autographed by Marty! |
|
Our fabulous booth - showing off the Snort community, Snort's awards and Certifications. |
About Sguil:
Sguil (pronounced 'sgweel') is built by network security analysts for network security analysts. Sguil's main component is an intuitive GUI that provides realtime events from snort/barnyard. It also includes other components which facilitate the practice of Network Security Monitoring and event driven analysis of IDS alerts. The sguil client is written in tcl/tk and can be run on any operating system that supports tcl/tk (including Linux, *BSD, Solaris, MacOS, and Win32). For more info, check out www.sguil.net.
About BASE:
BASE is the Basic Analysis and Security Engine. It is based on the code from the Analysis Console for Intrusion Databases (ACID) project. This application provides a web front-end to query and analyze the alerts coming from a SNORT IDS system. BASE is a web interface to perform analysis of intrusions that snort has detected on your network. It uses a user authentication and role-base system, so that you as the security admin can decide what and how much information each user can see. It also has a simple to use, web-based setup program for people not comfortable with editing files directly. For more information about BASE, check out http://secureideas.sourceforge.net/.
|
