Re: Signature vs Anomaly- again (wasRe: IDS Players?)

From: Brian Hernacki (bhernack@recourse.com)
Date: 06/18/02 

Date: Tue, 18 Jun 2002 13:47:55 -0700
From: Brian Hernacki <bhernack@recourse.com>
To: Vitaly Osipov <witt@iol.ie>

Vitaly Osipov wrote:
>
> I guess the differences between these two were discussed many times - but
> does anybody know of any commercial system (and the one what is used by more
> than a couple of people :) ), which is based on anomaly detection rather
> than on signature matching?

ManHunt's detection is based on anomaly detection methods (though also
includes other forms as well). You can get more info at:

http://www.recourse.com/product/ManHunt

--brian