The scrutinizer is designed to protect Web servers from HTTP (D)DoS attacks. It's a toolkit consisting of an analysis engine which analyzes Web server access logfiles in almost real time, an Apache module which is able to block wrongdoers on the Web server, an extension to block offenders with netfilter firewalls, and a set of visualization tools. The analysis engine uses statistical anomaly detection to expose offenders. The enginge has to be trained with old log files so that it can adapt itself to your system. This will be added to Security Resources 2005 Internet MiniGuide.
posted by Marcus Zillman |
4:20 AM
