What is DiSARM?
DiSARM is an acronym for Distributed Signature and Anomaly Real-Time Detection. It is a cluster-based network intrusion detection system that works both at the packet and session level. The system can scale to meet any bandwidth requirement from ethernet to potentially 10-gigabit ethernet. Data is archived in a highly optimized database to allow long-term analysis of extremely large network traffic data sets.