<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>The NoAH Blog &#187; ISP</title>
	<atom:link href="http://blogs.fp6-noah.org/noah/tag/isp/feed/" rel="self" type="application/rss+xml" />
	<link>http://blogs.fp6-noah.org/noah</link>
	<description>an ark of honeypot knowledge...</description>
	<lastBuildDate>Tue, 07 Jul 2009 14:35:20 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.4</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>NoAH: a versatile tool for every ISP&#8217;s toolbox</title>
		<link>http://blogs.fp6-noah.org/noah/noah-a-versatile-tool-for-every-isps-toolbox/</link>
		<comments>http://blogs.fp6-noah.org/noah/noah-a-versatile-tool-for-every-isps-toolbox/#comments</comments>
		<pubDate>Wed, 09 Jul 2008 14:19:13 +0000</pubDate>
		<dc:creator>FORTHnet</dc:creator>
				<category><![CDATA[noah]]></category>
		<category><![CDATA[forthnet]]></category>
		<category><![CDATA[ISP]]></category>

		<guid isPermaLink="false">http://blogs.fp6-noah.org/noah/noah-a-versatile-tool-for-every-isps-toolbox/</guid>
		<description><![CDATA[]]></description>
			<content:encoded><![CDATA[<p>The primary purpose of NoAH system is detection of unauthorized activity on organizational data networks. It does this by monitoring the activity on all the unused IPs in your network. Any attempted connection to an unused IP address is assumed to be unauthorized or malicious activity.  In the case where the system IP is in use the system (honey@home) can monitor unused service ports of the system and report activity.</p>
<p>Even though the aim of the project is to help NRENs and ISPs companies, feedback from them is crucial, since the main attacks committed through their networks. Using NoAH system can help detect, monitor and report suspect activities in real-time.</p>
<p>NoAH system main features:</p>
<ul>
<li>Provide source of data for      security analysis.</li>
<li>Produce attacks signatures for      further use (integration with IDS, firewalls and other network protection      tools).</li>
<li>It has few false positives, low      cost and low risk.</li>
<li>It does not capture legitimate      users traffic (No sensitive data).</li>
<li>Help the security teams      understand the threats they face and how to defend against them.</li>
<li>Raw data available for the      administrators.</li>
<li>Easy to adapt new honeypots on      the company’s network.</li>
<li>Open-source software.</li>
<li>Contribute to a large network      of Honeypots.</li>
</ul>
]]></content:encoded>
			<wfw:commentRss>http://blogs.fp6-noah.org/noah/noah-a-versatile-tool-for-every-isps-toolbox/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

