Snort

Snort is an Intrusion Detection Service often integrated in a firewall, since most of the time the firewall is in control of the whole network of an organization, so if the firewall is easily breached then the whole organization could be at stake. Files in an organization can usually be accessed in a network, so if the firewall, which supposedly protects that networks gets breached who knows what kind of damages a hacker can do to an organization.

In order to protect the firewall a layer of security is added which is the IDS - Snort, who is responsible to detect if there are any suspicious and harmful activities are done inside and outside the network.

We are currently studying this as our Final Project for INFOSEC, and we just finished it today.