RE: Intrusion prevention and dDos protection

From: Rob Shein (shoten_at_starpower.net)
Date: 08/23/03

  • Next message: Zach Forsyth: "RE: Network IDS" 
    To: "'Darren Windham'" <dwindham@dallastelco.org>, <focus-ids@securityfocus.com>
Date: Sat, 23 Aug 2003 13:26:22 -0400

    I would hasten to point out that there isn't anything you can buy that will
    give you DDos protection. While a firewall/IPS is like a security guard at
    the entrance to a building to keep bad people out, a DDos attack is like so
    many bad people trying to get into the building that they choke the streets
    leading up to it; nothing you can put in your building will deal with that
    congestion or prevent it.

    > -----Original Message-----
    > From: Darren Windham [mailto:dwindham@dallastelco.org]
    > Sent: Thursday, August 21, 2003 10:17 AM
    > To: focus-ids@securityfocus.com
    > Subject: Intrusion prevention and dDos protection
    >
    >
    > I recently had the chance to meet with the guys over at
    > Melior and talk about their iSecure platform. Has anyone
    > else taken a look at it? I was pleasantly suprised at its
    > performance. I ran most of the common scanners on both Linux
    > and Windows platforms and had no such luck with it. I can
    > only hope that more products like this make it to the
    > mainstream marketplace. If you are looking for a IPS/dDos
    > prevention I'd make sure you take a good look at these guys.
    >
    > I'd love to hear feedback from others who have looked at this
    > or other similar products.
    >
    > Check them out at http://www.meliorinc.com
    >
    > Regards,
    >
    > Darren Windham
    > Network Administrator, Dallas Telco FCU
    > email: dwindham@dallastelco.org <mailto:dwindham@dallastelco.org>
    >
    >
    >
    >
    > Disclaimer: The information contained in this email is
    > confidential and is intended solely for the use of the person
    > identified as the recipient. If you are not the intended
    > recipient, any disclosure, copying, distribution, or taking
    > of any action in reliance on the contents is prohibited. If
    > you received this email in error, please contact the sender
    > immediately and dispose of the contents in a secure manner.
    >
    >
    >
    > --------------------------------------------------------------
    > -------------
    > Attend Black Hat Briefings & Training Federal, September
    > 29-30 (Training), October 1-2 (Briefings) in Tysons Corner,
    > VA; the world’s premier
    > technical IT security event. Modeled after the famous Black
    > Hat event in
    > Las Vegas! 6 tracks, 12 training sessions, top speakers and
    > sponsors.
    > Symanetc is the Diamond sponsor. Early-bird registration
    > ends September 6 Visit: www.blackhat.com
    > --------------------------------------------------------------
    > -------------
    >
    >

    ---------------------------------------------------------------------------
    Attend Black Hat Briefings & Training Federal, September 29-30 (Training), October 1-2 (Briefings) in Tysons Corner, VA; the world’s premier
    technical IT security event. Modeled after the famous Black Hat event in
    Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.
    Symanetc is the Diamond sponsor. Early-bird registration ends September 6 Visit: www.blackhat.com
    ---------------------------------------------------------------------------

  • Next message: Zach Forsyth: "RE: Network IDS"

    Relevant Pages

    • RE: Looking for security resources for SCO open server
      ... While I agree SCO sux. ... Try www.pcunix.com for security stuff on it. ... > technical IT security event. ... > Symantec is the Diamond sponsor. ...
      (Security-Basics)
    • Re: IT Security Management
      ... Try the Security Managers Mailing List ... information security management practices is critical to the security ... > technical IT security event. ... > Symantec is the Diamond sponsor. ...
      (Security-Basics)
    • RE: Cisco IOS vulnerability
      ... Subject: Cisco IOS vulnerability ... On a perimeter router you should be implementing RFC1918 and RFC2827 ... Although these security measures in themselves will not prevent the attack, ... world's premier technical IT security event! ...
      (Incidents)
    • RE: Need some help and guidance, please....RE: TROJAN: Symantec: New Serious Virus found. (fwd)
      ... which will bring up lots of pop up windows like window ... > Norton Security Response, has detected a new virus in the Internet. ... > world's premier technical IT security event! ... > Early-bird registration ends July 3. ...
      (Incidents)
    • RE: Cisco IOS vulnerability
      ... Subject: Cisco IOS vulnerability ... On a perimeter router you should be implementing RFC1918 and RFC2827 ... Although these security measures in themselves will not prevent the attack, ... world's premier technical IT security event! ...
      (Incidents)