Aanval is a commercial

SIEM Siem is a surname. Notable people with the surname include: *Charlie Siem (born 1986), British violinist * Kjetil Siem (born 1960), Norwegian businessperson, journalist, author and sports official * Kristian Siem (born 1949), Norwegian businessman ...

product designed specifically for use with Snort,

Suricata ''Suricata'' is a genus of mongoose that is endemic to Africa. The oldest species known is the extinct ''Suricata major'' that lived about 1.8 million years ago in South Africa South Africa, officially the Republic of South Africa (RSA), ...

, and

Syslog In computing, syslog is a standard for message logging. It allows separation of the software that generates messages, the system that stores them, and the software that reports and analyzes them. Each message is labeled with a facility code, i ...

data. Aanval has been in active development since 2003 and remains one of the longest running Snort capable SIEM products in the industry. Aanval is

Dutch Dutch commonly refers to: * Something of, from, or related to the Netherlands * Dutch people () * Dutch language () Dutch may also refer to: Places * Dutch, West Virginia, a community in the United States * Pennsylvania Dutch Country People E ...

for "attack".

History

Aanval was created by Loyal Moses in 2003 but was not publicly made available until March 2004 where it was released under the private commercial license C1-RA1008. Throughout the lifecycle of the software it has also been referred to as OpenAanval or ComAanval in addition to Aanval. Aanval's had provided

AJAX Ajax may refer to: Greek mythology and tragedy * Ajax the Great, a Greek mythological hero, son of King Telamon and Periboea * Ajax the Lesser, a Greek mythological hero, son of Oileus, the king of Locris * ''Ajax'' (play), by the ancient Gree ...

style security event monitoring and reporting from a web-browser. Since Aanval's creation, it has developed into an

intrusion detection An intrusion detection system (IDS; also intrusion prevention system or IPS) is a device or software application that monitors a network or systems for malicious activity or policy violations. Any intrusion activity or violation is typically rep ...

correlation In statistics, correlation or dependence is any statistical relationship, whether causal or not, between two random variables or bivariate data. Although in the broadest sense, "correlation" may indicate any type of association, in statisti ...

and threat management console with a specific focus on normalizing Snort, Suricata, and Syslog data. Several information security related books have been published that include details and references to Aanval, including "Linux Server Security, Second Edition" by

O'Reilly Media O'Reilly Media (formerly O'Reilly & Associates) is an American learning company established by Tim O'Reilly that publishes books, produces tech conferences, and provides an online learning platform. Its distinctive brand features a woodcut of ...

, "Security Log Management" by

, "Snort: IDS and IPS Toolkit" by

and in 2010 "Unix and Linux System Administration Handbook, Fourth Edition"Unix and Linux System Administration Handbook, Fourth Edition: Safari Books Online
/ref> by

References

External links

* {{Official website, http://www.aanval.com/
Aanval wiki

Snort homepage

OISF homepage
Computer security software

History

See also

References

External links