Alert Case Study

Words: 1297
Pages: 6
Open Document
1. When running Snort IDS why might there be no alerts?
A user not receiving alerts could be occurring for a few reasons. The main one would be Snort not being configured correctly. In order for Snort to run properly, it requires a set of rules. When first installed Snort provides users with a set of default rules, which can be modified as they see fit. However, when they modify the rules they could potentially disable packet sniffing on certain ports resulting in Snort to miss the alerts (manual snort). During the configuration process users should list all ports that are needed to be scanned.
2. If we only went to a few web sites, why are there so many alerts?
In some instances, Snort has the potential to create false positives. Admin …show more content…
Security Professionals are able to better diagnose the network traffic when there is a more complete history of the system. With the complete history they can look at past vulnerabilities allowing them to form better plans to deal with future attacks. The complete information can also allow for a more targeted response to each incident. The information gathered by Snort can be used in conjunction with your firewall logs and system logs to find the potential attacks before a real problem occurs (Brennan, 2002). Instead of guessing about the vulnerabilities that the system has faced you will know exactly what is after your …show more content…
This rule will send alerts if anyone is bypassing normal authentication, securing illegal remote access to a system, and obtaining access while trying to remain undetected. This would reduce the likelihood of someone gaining access to my high level security network without me knowing about it.
7. If a person with malicious intent were to get into your network and have read/write access to your IDS log or rule set how could they use that information to their advantage?
A person with malicious intent gains access to your rule set and your IDS log would have access to an enormous amount of information. With the knowledge of the rule sets they would know what is being monitored right down to the ports. The IDS log will give them more information on what is actually reported. A malicious attacker will use this information to formulate their plan of attack and avoid the ports which are being monitored by Snort. With read/write access they could even go as far as to change the ports being monitored and alter the IDS log to erase any mention of their presence on your network.
8. An intrusion prevention system can either wait until it has all of the information it needs, or can allow packets through based on statistics (guessed or previously known facts). What are the advantages and disadvantages of each
Show More

Related Documents: Alert Case Study

Case Study: Dane County's Alert And Warning System

Madison Alert and Warning System For this paper I will be referring to the Dane County Emergency Management’s Alert and Warning System. Emergency Management for my jurisdiction, Madison, WI, is handled by Dane County. Thus, the alert and warning systems in place for the city are under the jurisdiction of Dane County Emergency Management. In this paper, I will summarize the current warning systems the county has in place and develop some recommendations for improvements. Dane County has a robust…

Words 533 - Pages 3

Doctor-Assisted Suicide Case Summary

machine and blood thinners. However, even after the patient was put on the ventilator, it was found that she was too confused. She could interact with people, but she could not make decisions. The doctors realized that she had a mental problem (Case Study: The Alert and Incompetent Self The irrelevant of advance Directives.). The woman did not have any family members who could make decisions on her behalf. The only close people were two friends, who had known her for a long time. She had an advance directive…

Words 682 - Pages 3

Study Guide Essay

High-Alert Medications and Safe Practices A study guide for nurses Marla Husch, RPh Jennifer M. Groszek, RN, BSN, MJ Denise Rooney, RN, BSN, OCN CONTENTS About the authors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .iv Acknowledgements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .vi Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .…

Words 3638 - Pages 15

Andrew's Case Study: Adult Safeguarding

In this essay I am going to be looking at Andrew’s case study and evaluating the extent in which Andrew is at risk and in what way practitioners and agencies should be involved in safeguarding Andrew. Adult safeguarding is an important role in helping individuals with their own care and supports needs and also to live their lives free from abuse and neglect. This also includes preventing those individuals from abuse, minimising risk without taking all control away from them and also responding appropriately…

Words 772 - Pages 4

Week 3 Assignment 1 Essay

Assess Organizational Readiness Chanel N. Oliver Professor Steven Englehart Project Risk Management BUS519 January 25, 2015 Analyze how the Critical Success Factors (CSFs) apply to the facts of the case study. Provide examples to support your analysis. According to Kim Heldman, PMP, critical success factors are those requirements or deliverables that must be completed (and completed satisfactorily) to consider the project a success. Critical success factors…

Words 1823 - Pages 8

Altruism Are Flawed: Article Analysis

In groups of meerkats, for example, some mebers supposedly risk their lives to ensure other members' survival. In this case, sentinels (members who risk themselves) stand guard and alert the other meerkats by producing and alarm in case there are predators nearby. In the past, scientists believed that these altruistic members standed guard with an empty stomach. What new studies found, according to the professor, is that such sentinels would eat before they went stand guard, so they are not sacrificing…

Words 301 - Pages 2

Patient Specific Dosing Case Study

and warnings - Identify and present appropriate dose recommendations based on patient-specific conditions and characteristics at the time of medication ordering. Support for accurate specimen collection - Alert providers in real-time to ensure specimen collection is supported. Present alerts for preventive services and wellness - At the point of clinical decision making, identify patient specific suggestions/reminders, screening tests/exams, and other preventive services in support of routine preventive…

Words 972 - Pages 4

patriot act Essay

sat, which is the trained behavior upon discovering the odors strongest point. Detective Bartelt then pulled the dog away from the door and returned to his vehicle. He left the scene after informing Detective Pedraja that there had been a positive alert for narcotics. Based on what he had learned at the home, Detective Pedraja applied for and received a warrant to search the residence. When the warrant was executed later that day, Jardines attempted to flee and was arrested the search revealed marijuana…

Words 4455 - Pages 18

Essay on Military: Military and Instance Health Insurance

The Closure of military alert sites and the effects it HAS ON the military Jennifer Snyder The Closure of military alert sites and the effects it HAS ON the military Jennifer Snyder This essay is to inform the American people how disappointed we, the military members of the two alert sites are. We are disappointed due to the fact that our president or as the military calls him the commander and…

Words 1261 - Pages 6

Acct 2025 Assignment 1

development industry notoriously slow to adapt, describe your vision of what the clinical trials industry will look like in 2025. The clinical research industry has a tendency to be slow to adopt new technology. It doesn’t seem like that long ago that case report form data was entered on paper 3-part NCR forms. Additionally, the FDA Guidance for Risk Based Monitoring was introduced in 2013, and some sponsors are now finally starting to practice risk based monitoring. While medicine continues to advance…

Words 860 - Pages 4