Thursday, August 17, 2006

Share your firewall log

The DShield organization, which appears affiliated with the SANS Internet Storm Center, collects information about what attacks are being seen at computers. If you have a broadband internet connection (DSL or cable modem), you really need a firewall. And if you have a firewall, it should be set to generate a log of incoming and outgoing communication attempts.

The DShield site puts received data into a database so they can analyze attacks. They also have a list of how to send the data for various firewalls. The site also has links to third-party solutions.

DShield describes this as a distributed intrusion detection system, since tons of people pitch in from all over the globe.

No comments: