Subject: impact types too general ?

From: "David Maciejak" <[email-masked]>
Date: Wed, 11 Feb 2004 14:01:25 +0100

Hi,

In the last draft, we have 6 impact types (admin, dos, file, recon, user,
other).

Don't you think 'other' group is too general ?

It would be great to have more categories like in Snort or Netforensics: 

(I don't know how many ..)

For example 

- virus, exploit, evasion, monitoring, policy violations could be add

- admin and user type could be join in an
authentication/access/authorization group (and set severity correctly)

David Maciejak