[Dshield] DShield vs. Symantec: new features?

Johan Denoyer jdenoy at digital-connexion.info
Thu Jan 8 15:24:01 GMT 2004


Erwin Van de Velde a dit :
> Now, as far as I can see, the sysadmin has to read the page and adapt the
> firewalls himself, because there is no way to parse such data
> automatically.
> (Infocon is a picture, the daily messages about exploits and such are
> plain
> text).

for the picture it is possible to detect changes! download pictures,
changes it to base64, and compare it to already made base64 file of all
the different picture levels to detect security level...



Salutations,

Johan Denoyer
jdenoy at digital-connexion.info
Digital Connexion
http://www.digital-connexion.info




More information about the list mailing list