Knoppix-NSM is a software framework aimed at educating people about Network Security Monitoring. It provides a platform for learning about security issues and helping users to improve their network security observations.
But the software goes beyond simple experimentation - KNOPPIX-NSM can also be installed directly onto your hard disk, allowing you to deploy a NSM framework into your production network for real-time monitoring. The benefits of the software include rapid sensor deployment and complete out-of-channel intrusion detection and analysis center.
With KNOPPIX-NSM, you can quickly deploy a complete NSM network to monitor your existing infrastructure. The software comes pre-configured for the deployment of multiple sensors and databases, with the only thing left for you to do being to create the sensor accounts in the database and change a few passwords.
Security is also a top priority for KNOPPIX-NSM. Remote communications are conducted over SSL tunnels, so you don't need to worry about eavesdroppers accessing your network channels. Additionally, iptables are utilized to ensure that only allowed hosts can connect and only necessary services are visible to the network.
KNOPPIX-NSM's ease of use doesn't stop there. If you need another console, just boot from the CD and set the host and IP address at boot time - you're ready to go!
In summary, KNOPPIX-NSM is an all-in-one tool designed to help you learn about Network Security Monitoring with ease. The software comes with accompanying documentation on the tools and how they're put together in the NSM framework.
Version 1.2: N/A