Snort Intrusion Detection System (IDS) Logfile Visualisation
Duration
June 2006 – Mar 2008
Internal Participants
Craig Valli, Andrew Woodward, Trish Williams, Chris Bolan
External Participants
British Telecom (5000 UK Pounds)
This project involves the near real-time to real-time visualisation for Snort IDS logfile data. This will involve the use of Paraview modelling software running in real-time on the CRITS beowulf compute cluster to process outputs from a live IDS system. The intention of the project is to provide a mechanism to interpret and monitor threat from network intruders by visualising intrusion alerts or outputs from the IDS. One of the main problems with conventional IDS in large network pipes is the ability to process the IDS data into a meaningful, accurate and timely framework to enable timely, informed response to inbound or outbound threats on a network infrastructure.