Everyone,
As some poeple have noticed, I've been playing around in CVS repository. I
was getting a little antsy and went ahead and wrote some code. Some of the
additions in the repository are 0-length. I use many of these as mental
notes, and some may be deleted in the future. They help me grok the
physical design of the app, predict any maintenance headaches that might
come our way, and allow me to write makefiles that I use heavily during
development. The ASP, Perl, and PHP directories are simply place-holders
for now.
I've begun implementing the Intrusion Detection Working Group's Intrusion
Detection Message Exchange Format in Java. I believe this draft standard to
be a good place to start from an architecture and reporting perspective.
The most recent version of the document can be found in filters/docs/ as
draft-ietf-idwg-idmef-xml-06.txt. The code is located in
filters/lang/java/src/org/owasp/idmef.
Nathan
|