1. By: Paul Albert

2.  Project Description  Design Protocols  User Profiles  Deliverables  Timeline  Budget  Demonstration  Conclusion

3.  This project creates an easy-to-implement, accurate, and low-cost solution for discovering, mitigating, and reporting bots and botnet activity on a network, along with many other types of malicious network attacks  Small businesses to large companies  Flexible  Scalable

6.  Ubuntu – Version 9.10  Snort IDS – Version 2.8.6 ◦ IPS Functionality  MySQL  Basic Analysis and Security Engine (BASE)  Barnyard2 – Version 2.1.8  Perl  VirtualBox – Version 3.1.2  Windows XP  BackTrack 4

7.  Can vary based on the size of the network  Ownership of process  Installation ◦ Knowledge to implement solution  Maintenance of IDS and BASE ◦ Knowledge to troubleshoot IDS and BASE ◦ Knowledge to script in Perl  Analysis of IDS and BASE  Receiving and responding to alerts

8.  VirtualBox Install  Intrusion Detection System (IDS) Setup ◦ Installation of required software ◦ Configuration of required software  Basic Analysis and Security Engine Setup  Mitigation  Scripting ◦ Perl script to assist with install process  Testing ◦ Test to make sure IDS is functioning properly

12.  There is a need for small, medium, and large sized companies to be able to detect and/or mitigate, and report on malicious activity  Reporting features  Easy-to-implement  Accurate  Low-cost