BRO anomaly detection

[Syed_Muhammad_Ali_Ab]

Dear All
I am working in the area of Anomaly detection. I am interested in understanding the existing mechanism implemented in BRO.

Please refer me some useful material and/or research papers, especialy how it is different than SNORT.

Thanks

[Syed_Muhammad_Ali_Ab]

any updates?

[Dopheide_Jeannette_M]

Hello Syed,

We maintain a list of research papers involving Bro. You can find them here:
https://www.bro.org/research/index.html

Thanks,
Jeannette