OSSIM: the Open Source Security Information Manager

[ Thanks to Houcem HACHICHA for this link. ]

"OSSIM is a fully featured SIM solution that offers all the necessary functionality, ranging from the detection at low-level to high-level reporting.

"Founded in 2003 by AlienVault, OSSIM is at the time of this writing the de-facto standard in Open Source Security Information Management. Indeed, AlienVault claims to have an installed user base exceeding 10,000 units, which accounts for half of the installed SIM market. Based on GNU/Linux Debian, kernel 2.6, OSSIM takes advantage of the wealth of free software "gems", by integrating a handy suite of security open source tools, among which:

* OSSEC Host Intrusion Detection System;
* OpenVAS Vulnerability Assessment Scanner;
* OCS Inventory;
* Nagios Availability Monitor;
* Nmap Port Scanner;
* etc."

Complete Story

Related Stories:

• Security information management: OSSIM(May 23, 2007)