How to measure 'status' of IDS Deployment

From: idsquestions@hushmail.com
Date: 08/23/02 

Date: Fri, 23 Aug 2002 09:23:14 -0700
To: focus-ids@securityfocus.com
From: idsquestions@hushmail.com

I have been tasked with comparing my IDS deployment at work to determine if it is 'world class'/'best in class' quality'. This is rather vague as it is hard to quantify and compare placement issues and success. I wonder how others are approaching this? This more than 'we saw 500,000 things this week and 100 were real things we investigated'..

How do you, perhaps as a ROI issue, justify the money spent and compare your deployment to established(?) benchmarks?

-Bob

Get your free encrypted email at https://www.hushmail.com

Relevant Pages

  • Re: java performance on machines
    ... Primarily the goal is to compare cpu/memory power on different ... The idea is to write a series of tests in java, both integer and float ... If synthetic benchmarks are ok then you could look at the SPEC benchmarks ...
    (comp.lang.java.help)
  • Calculating quarterly investment returns---XIRR or another function??
    ... I am trying to compare the rates of return on an investment account to other ... The calculated XIRR for the account for one year is 20.11%. ... For comparison, here are returns for the Vanguard Wellington mutual fund, ... fact provide quarterly results that can be accurately compared to benchmarks ...
    (microsoft.public.excel.worksheet.functions)
  • Fastcode CompareMem B&V
    ... improvement in the benchmarks: ... affects the scoring depending in which order the entries are benchmarked. ... The largest compare is up to 1000 bytes. ... predictor in places where the CompareMem routine needs to branch depending ...
    (borland.public.delphi.language.basm)
  • Re: SPB Benchmarks
    ... I didn't compare just final overall numbers. ... > The h19xx series scores unusually high on graphics benchmarks. ... > no one has been able to explain the reasons why. ...
    (microsoft.public.pocketpc)
  • benchmarking parallel chips
    ... look forward to some very high-quality benchmarks for the SEAforth chip ... Some of the problems I have been dealing with are how to compare ... How does one compare task switch time on a system with one proceesor ... with fewer tasks per processor and multiple tasks running at one time? ...
    (comp.lang.forth)