From Wikipedia, the free encyclopedia
Jump to: navigation, search
Original author(s) Loyal Moses
Developer(s) Tactical FLEX, Inc.
Stable release
8.0 [1]
Written in
Operating system
Website www.aanval.com

Aanval is a commercial SIEM product designed specifically for use with Snort, Suricata, and Syslog data.[2] Aanval has been in active development since 2003 and remains one of the longest running Snort capable SIEM products in the industry.

Aanval is Dutch for "attack".[3]


Aanval was created by Loyal Moses in 2003 but was not publicly made available until March 2004 where it was released under the private commercial license C1-RA1008.[4] Throughout the lifecycle of the software it has also been referred to as OpenAanval[5] and ComAanval in addition to its current and registered trademark name Aanval.

Aanval's original success was in providing AJAX style, security event monitoring and reporting from a web-browser. Since Aanval's creation, it has become an intrusion detection, correlation and threat management console with a specific focus on normalizing Snort, Suricata, and Syslog data.

In 2010, Aanval was the first intrusion detection vendor to provide an integrated iOS App that allowed users to view security events remotely from an iPhone, iPad and iPod Touch.[6]

Several information security related books have been published that include details and references to Aanval, including "Linux Server Security, Second Edition"[7] by O'Reilly Media, "Security Log Management"[8] by O'Reilly Media, "Snort: IDS and IPS Toolkit"[9] by O'Reilly Media and in 2010 "Unix and Linux System Administration Handbook, Fourth Edition"[10] by O'Reilly Media.

See also[edit]


External links[edit]