It doesn't seem like it replaces Snort, which is an intrusion prevention system.... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

freehunter on May 4, 2015 | parent | context | favorite | on: Introducing FIDO: Automated Security Incident Resp...

It doesn't seem like it replaces Snort, which is an intrusion prevention system. It's more akin to AlienVault, which is a SIEM. Netflix shies away from the term SIEM. They call this an incident response software. I'm reading through it trying to figure out how it's different from a SIEM, but there's not a lot of technical details.

thieving_magpie on May 4, 2015 [–]

So akin to snorby mixed with Ossec active-response? Should be interesting to see if this gets picked up in an OS like Security Onion.

Also, it appears to use snort.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact