OpenAppID

OpenAppID is language of the description of applications.

On February 25, 2014 the Cisco Systems company announced a modern language of the description of applications of OpenAppID as functionality of identification and control of applications of the Snort system.

Description

The open functionality of identification and control of applications implemented by means of a modern language of the description of the Cisco OpenAppID applications helps with creation, distribution, execution of mechanisms of detection of applications for the fastest reaction to the new threats proceeding from applications.

Specific Features

The OpenAppID language provides detection of applications, accelerates creation of detectors of applications, gives to community the chance to exchange detectors for the purpose of protection quality improvement.

According to developers, OpenAppID will accelerate detection and will expand a range of the detected applications thanks to simplification of information exchange between associates, to simplification of development of new detectors of applications. OpenAppID supports a number of important functions:

• detection of applications and reports generation. Users of the Snort system using new detectors of applications OpenAppID can detect and identify applications and receive reports on their use;
• the context of applications tied to network invasions. Providing a context of the application layer with inclusion of the events relating to security, OpenAppID helps to improve the analysis and to accelerate recovery;
• operational detection and control of applications. OpenAppID helps the Snort system to block certain applications or to announce their detection. It reduces risks by means of a scope of all horizon of threats.

Martin Roesch, the author of Snort, the vice president and the chief architect of division of Cisco - the system developer of security, noted: "The openness is important first of all it creates the atmosphere of trust and cooperation between producers and specialists whom the problem of counteraction to aggressive and sophisticated threats faces. Creating the sensor and control of applications in the open code, Cisco gives to community powerful tools of development of innovative solutions for elimination of difficult and specific security concerns".