Old Documents

• OSSIM general system description - [ Spanish , English ]
• OSSIM Fast Guide - [ English ]
• Correlation engine explained (RPC DCOM example) - [ English ]
• Correlation engine explained (Worm example) - [ English ]

Contributions

• A Practice of OSSIM (DCOM Exploit Event Correlation Test)
  The purpose of this practice is to validate the effect of OSSIM to the DCOM RPC exploit and to have a deep understand with the engine under the hood.
  
  YouYou <chensy at netway.net.cn>
  Lance <lance at antpower.org>

Related Articles

• Kaos.Theory: Fractal Blog
  Interesting article describing how to secure a site phisically as well as logically.

External Links

• Aberrant Behavior Detection in Time Series for Network Monitoring: automatic behaviour detection algorithm that we are implementing.