cipherdyne.org

Michael Rash, Security Researcher



Tenable Network Security and Log Parser for psad Events

Tenable psad Parser Tenable Network Security under the direction of Ron Gula has released a parser library for their Log Correlation Engine (LCE) so that syslog events from psad can be imported and analyzed. As the adoption of Linux systems continues to accelerate in both the commercial and non-commercial sectors, people are increasingly in a position to run the iptables firewall to enhance their security posture. With the verbose logging format offered by iptables, it is possible to detect a significant number of different attacks that involve the network and transport layer headers. psad automates this detection process, and now the output of psad can be integrated with Tenable's product line. For more information, see the blog post on the Tenable Blog.