[Discussion] Installers

[Matt Jonkman]

Kevin Ross wrote:

an installer on a cutdown linux/bsd system perhaps with a simple
installer, also perhaps configuration by a web interface. That way a
non-unix person can install the system selecting the relevant options,
then use the web interface to set up the distributed system. This would
attract more users by helping to simplify a basic setup. Possibly even
installers consisting of different tools, i.e an installer for
master/slave sensors for normal IDS/IPS and correlation and another say
for a honeypot with nepenthes or honeyd and in the install you can point
it to the master sensor. That way dedicated parts of the distributed
system can be installed easily by inexperienced users (which everyone
will be who comes to use this system at first till they learn it). Also
using this methods means different types of systems can be added to the
distributed IDS/IPS as need dictates such as some new type of detection
tool to some future type of attack.


--------------------------------------------
Matthew Jonkman
Emerging Threats
Phone 765-429-0398
Fax 312-264-0205
http://www.emergingthreats.net
--------------------------------------------

PGP: http://www.jonkmans.com/mattjonkman.asc