[SecViz] Geographic Representation of Snort Events

Mike Patterson mpatters at ist.uwaterloo.ca
Sat Mar 21 19:01:42 EDT 2009


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Sebastien Tricaud wrote on 3/20/09 11:13 AM:

> geographic stuff seems to be fun to show to your boss, but I don't see

> any technical interest in it (I know, I asked about wold maps

> ealier ;).

>

> As anybody have a different view on this subject?


We've blocked certain countries' TLDs from accessing some services,
after observing that we saw nothing but badness coming from there to
those services. (Specifically Ghananian IPs to some of our webmail
services.)

Aside from that, I can't see it being of anything other than a
curiosity, but of course I'm willing to be proven wrong. :-)

Mike

- --
Being afraid of monolithic organizations especially when they have
computers is like being afraid of really big gorillas especially
when they are on fire. -Bruce Sterling
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAknFcdYACgkQrqw9H9F0mCRCHACglUgClU5rTzBfIqaAfrqxkHok
vWwAniSP3A1n2oyW3NTymc54pD3+GS//
=Vium
-----END PGP SIGNATURE-----


More information about the SecViz-Visualization mailing list