[WormTrack] Detection of scanning worms, and machine scans

A Network IDS which allows detection of scanning worms on a Local Area Network by monitoring of anomalous ARP traffic. This allows detection of scanning threats on the network, without having a privileged access on a Switch to set up a dedicated Monitor PORT, nor does it require a constant updating of the rules engine to address new threats.
[WormTrack] Detection of scanning worms, and machine scans
Reviewed by 0x000216
on
Wednesday, February 05, 2014
Rating: 5
![[WormTrack] Detection of scanning worms, and machine scans](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlKCs96xFMDZ-qoxS5crXF2kCkh0MGSc87LQTBzx1ZcOT1pG2B3YkgEKrLXYl2vY4GZIUSmf5HqUIxpIEp3h2Y6GQVWwlwfkDTjWoTFFNvpZYqb8KI_oM-4U7PreO_vQ9R5lVky4tnz5s/s72-c/WormTrack.jpg)