Re: Using Snort to find creditcard data?

[Stefano Zanero <s.zanero () securenetwork it>]

jerikl75 () gmail com wrote:
> Would it be possible to write a Snort rule that triggers on possible creditcard numbers and how would it look like?
> PCI standars says that all creditcard data should be encrypted, It woild be nice to verify that no card data shows up 
> where it shouldn't...

Something like
http://regexlib.com/REDetails.aspx?regexp_id=340

In a PCRE field ?

Stefano

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw 
to learn more.
------------------------------------------------------------------------