ABSTRACT

In this chapter we turn our attention to topics that are security related. First we examine a program referred to as Snort®. Snort represents an open-source network intrusion prevention and detection system (IPS/IDS) that was developed by a firm named Sourcefire. This program combines the benefits of signature examination, protocol, and anomaly-based inspection. According to Sourcefire, Snort is the most widely deployed IPS/IDS program on a worldwide basis, with millions of downloads and approximately 400,000 registered users, and has become a de facto standard for intrusion detection and prevention. After we examine Snort we continue with an examination of several additional security-related programs. Next is a discussion of the use of SpywareBlaster, a program that can be used to prevent the installation of spyware and other potentially unwanted software. This is a Windows-based program that while simple to install and operate has some key operational capabilities. Following our discussion of SpywareBlaster we then turn our attention to a program that monitors our computer for keyboard loggers, referred to as keyloggers, as well as other suspicious software. Referred to as Online Armor, this program has some very interesting capabilities.