Tools and Methods for Managing Snort Sensors in Distributed Environments

Intrusion Detection Systems are a valuable component of a security monitoring program; however, they can be expensive to operate, both in terms of equipment/licensing costs and person hours. By making use of commodity hardware and open-source products, Ohio University has greatly simplified the management while minimizing the associated costs. University at Albany–SUNY will discuss tools and methods by which one can manage the large number of Snort signatures and ensuing deluge of alerts.