DShield and Mindflow have partnered to enable users to automate their incident management and better protect their information systems.

DShield Overview

DShield is a free and open service that provides a platform for users of firewalls to share intrusion information. It’s a community-based collaborative firewall log correlation system.

Worldwide volunteers submit logs, and DShield uses them to analyze attacks trends. 

It relies on a different approach to blocklist formulation, called Highly Predictive Blocklisting. This blocklist compares your firewall logs to firewall logs submitted by other contributors.

If you and these other contributors are hit on parallel ports, you’re more likely to be attacked by the same IPs. Then, your own HPB is created from the IP addresses that target similar contributors. 

By integrating with the solution, Mindflow allows its users to access correlated information at no charge to raise awareness and provide accurate and current data of internet attacks. 

Benefits

• Access to a distributed intrusion detection system approach to share intrusion information
  
• Rely on similar contributors’ firewall logs to enrich your blocklist