From the page:


This is exactly what I am looking for in setting up my PoC model of my architecture.

I have been feeling the need to create something for my project instead of a cop-out best practises only type thing. I realise there is value in that.

Incidentally I just asked Jason Chan of @stake research to have a look at my paper which I based on his. I think he would have some excellent feedback.

Anyway back to the point. I am thinking of doing two things.

1. Create a linux distro that implements my architecture. A Knoppix style distro that would provide an example set-up.
2. Reverse engineer M$ SUS so that a Unix server can be implemented. This will allow a Unix server to distribute patches to M$ machines. This would also be integrated into the distro above.

I need to read more and see if there is a call for this sort of thing and that people haven't done it already.

UPDATE 21st Sept

Thanks to Fred Avolio for pointing out here that intrusion prevention is nothing new and was called 'active security' by Network Associates back in 1999. Us newbie's need to learn.