{% extends "toplevel-base.html" %}

{% set show_sidebar_toc = false %}
{% set show_logo = false %}
{% set title = "The Zeek Network Security Monitor" %}

{% block intro %}
{% endblock %}

{% block content %}
 
<img id="bro-eyes" src="images/bro-eyes.png" alt="Bro Eyes" class="center" />

<div id="bro-title">The Zeek Network Security Monitor</div>

<!-- <div class="quicklinks-item">
    <a class="donate-link-button" href="donate/sponsorship.html" class="center" />Support the Zeek Future Fund</a>
</div> -->

<div class="grid_9 alpha omega">
<p>
<a href="./why_choose_zeek.pdf">Why Choose Zeek?</a> Zeek is a
powerful network analysis framework that is much different from the
typical IDS you may know.  (Zeek is the new name for the
long-established Bro system. Note that parts of the system retain the
"Bro" name, and it also often appears in the documentation and
distributions.)
</p>
</div>



<div class="grid_4 alpha">
	<ul class="iconlist clean">

	<li class="clearfix">
	    <h5>Adaptable</h5>
        <p>
        Zeek's domain-specific scripting language enables site-specific
        monitoring policies.
        </p>
    </li>

    <li class="clearfix">
	    <h5>Efficient</h5>
        <p>
        Zeek targets high-performance networks and is used
        operationally at a variety of large sites.
        </p>
    </li>

    <li class="clearfix">
	    <h5>Flexible</h5>
        <p>
        Zeek is not restricted to any particular detection approach and
        does not rely on traditional signatures.
        </p>
    </li>

	<li class="clearfix">
	    <h5>Forensics</h5>
        <p>
        Zeek comprehensively logs what it sees and provides a
        high-level archive of a network's activity.
        </p>
    </li>

	</ul>
</div>

<div class="grid_4 omega suffix_1">
	<ul class="iconlist clean">

    <li class="clearfix">
	    <h5>In-depth Analysis</h5>
        <p>
        Zeek comes with analyzers for many protocols, enabling high-level
        semantic analysis at the application layer.
        </p>
        </li>

	<li class="clearfix">
	    <h5>Highly Stateful</h5>
        <p>
        Zeek keeps extensive application-layer state about the network
        it monitors.
        </p>
    </li>

    <li class="clearfix">
	    <h5>Open Interfaces</h5>
        <p>
        Zeek interfaces with other applications for real-time exchange
        of information.
        </p>
    </li>

	<li class="clearfix">
	    <h5>Open Source</h5>
        <p>
        Zeek comes with a BSD license, allowing for free use with virtually
        no restrictions.
        </p>
    </li>

    </ul>
</div>

<div class="grid_9 alpha omega">
<p>
While focusing on network security monitoring, Zeek provides a
comprehensive platform for more general network traffic analysis as
well. Well grounded in more than 20 years of research, Zeek has
successfully bridged the traditional gap between academia and
operations since its inception. Today, it is relied upon operationally
by both major companies and numerous
educational and scientific institutions for securing their
cyberinfrastructure.
</p>

<p>
Zeek was originally developed by Vern Paxson. Robin Sommer now
leads the project, jointly with a core team of researchers and
developers at
the <a href="http://www.icsi.berkeley.edu">International Computer
Science Institute</a> in Berkeley, CA; and the
<a href="http://www.ncsa.illinois.edu">National Center for
Supercomputing Applications</a> in Urbana-Champaign,
IL.
</p>

<div class="center"><b>Partner Organizations</b> <br><br>
<a href="https://www.icsi.berkeley.edu/">
<img src="donate/logo-icsi.jpg" alt="ICSI logo" height="50">
</a>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
<a href="http://www.ncsa.illinois.edu/">
<img src="donate/logo-ncsa.png" alt="NCSA logo" height="50">
</a>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
<a href="http://www.lbl.gov/">
<img src="donate/logo-lbl.png" alt="LBL logo" height="50">
</a>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
<br><br><br>
<b>Major Supporters</b><br>
<a href="https://www.corelight.com/">
<img src="donate/logo-corelight.jpg" alt="Corelight logo" height="100">
</a>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
<a href="https://www.mozilla.org/">
<img src="donate/logo-mozilla.png" alt="Mozilla logo" height="50" style="margin-bottom: 25px;">
</a>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
<a href="https://www.nsf.gov/">
<img src="donate/logo-nsf.jpg" alt="NSF logo" height="100">
</a>
<br><br>
<!--
Interested in becoming a supporter? Check out our <a href="{{docroot}}/donate/sponsorship.html">Sponsorship page</a>.
-->
</div>

</div>

{% endblock %}