Net Squared proposes developing a programming system, or framework, for processing and analyzing audit trails generated by host operating systems. This programming system, called the Audit Workbench, will provide (1) configuration and management for the collection of audit records, (2) the processing and presentation of audit records, (3) communication infrastructure for distributed deployment as well as integration with external IDS components and security management systems, (4) core intrusion detection capability, and (5) a platform for future DOD-sponsored research, development, and deployment of intrusion detection technologies. The goal is to do for host-based audit trails what our Network Radar is providing for network traffic analysis: a complete and robust platform on which to deploy leading edge technologies
