RE: amount of alarms generated by IDS
From: Frank Knobbe (frank_at_knobbe.us)
Date: 05/11/04
- Previous message: Jason: "Re: amount of alarms generated by IDS"
- In reply to: Rob Shein: "RE: amount of alarms generated by IDS"
- Next in thread: cto: "Hi, I want to study IPS"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
To: Rob Shein <shoten@starpower.net> Date: Tue, 11 May 2004 15:52:58 -0500
On Tue, 2004-05-11 at 12:37, Rob Shein wrote:
> The reason why there are two separate terms..."inline IDS" and "IPS"...is
> because they are two separate things.
Dude! Don't get us started on *that* again :)
Imho, an inline IDS is a subset of those devices that some call
Intrusion Prevention Systems. It can be defined as a device that
inspects traffic like an intrusion detection system, and denies/blocks
or allows/passes traffic like a firewall. Inline IDS or gateway IDS.
But sure, it can prevent intrusions. ;)
Cheers,
Frank
- application/pgp-signature attachment: This is a digitally signed message part
- Previous message: Jason: "Re: amount of alarms generated by IDS"
- In reply to: Rob Shein: "RE: amount of alarms generated by IDS"
- Next in thread: cto: "Hi, I want to study IPS"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]