writing an intrusion detection system

[dijit]

hi everyone,

i am a linux virgin and just about to order my copy of SuSe linux :D

i am going to be writing an intrusion detection system : :eek: which will be a very hard task for me as i am new to both programming, linux, and security :eek: :eek:

i was going to write it in java as i have been reading about it recently, but am not pushed to definately do it in that language

basically i just want any help, hints tips, pointers to provious code, sites etc that i can look at to give me a helping hand

it would be very much appreciated

thanks for your time,

jilly

[bascule]

Why do you need to write your own intrusion detection system, there are all ready so many of them??

[BadFishBrewer]

Please pardon my newbieness, but where would one find some of these???
:confused:

[LrngTheHardWay]

Originally posted by BadFishBrewer
Please pardon my newbieness, but where would one find some of these???
:confused:

A good starting point would be here:
http://www.linuxsecurity.com/news/articles_intrusion_detection-1.html

[edit]
Also:
http://www.snort.org/

[dijit]

i want to write my own because i have the time too, and i want to learn three things: security, linux, and programming.

so i thought this would be an excellent way to go about it :)
and a bit of a challenge too :)

i have looked at snort, and because i want to write it in java, i dont think it will be of any help, as it is not translatable, if you know what i mean.

so i am going to either need help from an IDS program written in java, where i can see the code to see what they have done, or suddenly overnight become a programming/linux/security guru.

..goes to sleep with magic wand under pillow just in case ;)