SANS Internet Storm Center

The SANS Internet Storm Center (ISC) is a program of the SANS Technology Institute, focused on monitoring and analyzing malicious internet activity. Established in 2001, the ISC has played a significant role in cybersecurity, notably during the "Lion" worm attacks. It utilizes a distributed sensor network to track and analyze internet threats, similar to weather monitoring systems. The ISC provides essential services, including threat data collection, incident handling by a team of volunteer handlers, and collaborative analysis with DShield. It collects over twenty million intrusion detection log entries daily to identify trends and emerging threats. The center also disseminates public alerts and reports, offering valuable resources like the daily "Handler Diary," threat feeds, and insights on port activity and trends. The ISC serves as a global resource for the cybersecurity community, supporting a wide range of organizations and individuals interested in internet security.