new tome in Gartner vs IDS saga :-)

• Previous message: Schmehl, Paul L: "What about PortSentry?"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date: Thu, 4 Sep 2003 10:34:09 -0400 (EDT)
To: focus-ids@securityfocus.com

All,

Here is a fun new piece from Gartner folks on the IDS:
http://www.csoonline.com/analyst/report1660.html

Some of the claims are softened (gigabit stuff is gone), etc, while new
are added (e.g. IDS don't detect "authorized users taking unauthorized
actions or otherwise abusing their privileges").

The most fun one IMHO is the following: "you need intrusion detection, but
do not need intrusion detection systems" :-)

Best,

-- 
Anton A. Chuvakin, Ph.D., GCIA, GCIH
     http://www.chuvakin.org
   http://www.info-secure.org
---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Federal, September 29-30 (Training), October 1-2 (Briefings) in Tysons Corner, VA; the world’s premier 
technical IT security event.  Modeled after the famous Black Hat event in 
Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.  
Symanetc is the Diamond sponsor.  Early-bird registration ends September 6 Visit: www.blackhat.com
---------------------------------------------------------------------------

• Previous message: Schmehl, Paul L: "What about PortSentry?"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]