Educause Security Discussion mailing list archives

Re: Software that scans for SSN


From: Gary Golomb <coach () GWU EDU>
Date: Wed, 28 Sep 2005 07:52:09 -0400

In fact, there are a few snort rules for SSNs/CCs; check the rulesets at
bleedingsnort.com, specifically bleeding-policy.rules, sids
2001375-2001383.


For the guys who've tried the snort SSN sigs - what kind of results did
you get?

We loaded *only* the SSN sigs, and the cpu spiked to 99% and dropped
most of the packets on the wire. Have you guys really been getting
different results?

Current thread: