DefenseWorx, Inc.

The Defense Worx' intrusion detection system is a network-based system that performs high-speed traffic analysis of the content and context of a network packet to detect unauthorized traffic in real-time. It has inexpensive hardware and OS requirements. The intrusion detection system runs on an Intel Pentium class compatible processor with a 10/100 Ethernet card running the Linux kernel 2.2, Windows 95, Windows 98, Windows ME, Windows NT and Windows 2000. The Defense Worx' intrusion detection system is capable of detecting hundreds of common and new OS attacks out of the box and leverages the Arachnids database of network intrusion signatures. Furthermore, the system allows easy creation of custom signatures. This allows a user to easily search for words like "proprietary" going inside and outside of their network segment. The Defense Worx' intrusion detection system provides the user with two types of pattern match capabilities. It can search for patterns via a regular expression or a binary comparison. The binary comparison provides exceptional speed while the regular expression method allows the creation of complex patterns. For instance with the proper pattern the regular expression pattern match algorithm can be used to determine the difference between a UNIX "su", "su -" and "su - root", three different ways to change access levels in a UNIX OS.