the rest of my talk
Bro, Vern Paxon’s network security monitor, attempts to get a handle on site-wide security monitoring in a way that firewalls can’t -- more on that soon
Computer Immune Systems, from Stephanie Forrest at UNM, attempts to solve Problem 2 -- but only on a host, not for an entire network.
My idea: how to combine the best of both