IPS, alternative solutions

From: Daniel (deeper_at_gmail.com)
Date: 09/14/04

  • Next message: Bill Royds: "RE: session logging IDS" 
    Date: 14 Sep 2004 10:01:55 -0000
To: focus-ids@securityfocus.com
    ('binary' encoding is not supported, stored as-is)

    So far there has been a load of talk discussing which is the better technology. Personally i dont think IPS is ready for the big time. Yeah its great for small mum and dad networks, but for large financial networks with billions of pounds flowing across them, would you trust a technology to think and block what it seems as bad traffic?

    So what are the alternatives?
    I'd say more host based protection such as:

    - Stack protection
    - Application level firewalls (ModSecurity/SecureIIS)
    - Host based firewalls

    I'm interested to see what everyone else feels are alternatives to IPS

    --------------------------------------------------------------------------
    Test Your IDS

    Is your IDS deployed correctly?
    Find out quickly and easily by testing it with real-world attacks from CORE IMPACT.
    Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more.
    --------------------------------------------------------------------------

  • Next message: Bill Royds: "RE: session logging IDS"