Re: ISS Proventia G100's

From: Avi C (chesla_at_012.net.il)
Date: 08/02/05

  • Next message: Nakul Aggarwal: "Re: [BULK] Applying data mining to Intrusion Detection System" 
    Date: Tue, 02 Aug 2005 10:15:04 +0200
To: Joel Esler <eslerj@gmail.com>, Leigh Anderson <landerso@internode.com.au>

    Good signature-based engine with comprehensive attack signature DB but with
    very limited behavioral analysis (statistical analysis) capabilities.

    This means that known exploits will be mitigated thoroughly (good methods
    against evasion techniques) but behavioral-based attacks such as DoS & DDoS
    flood attack and new/unknown worms will not be detected efficiently.

    Avi.

    ----- Original Message -----
    From: "Joel Esler" <eslerj@gmail.com>
    To: "Leigh Anderson" <landerso@internode.com.au>
    Cc: <focus-ids@securityfocus.com>
    Sent: Friday, July 22, 2005 10:02 PM
    Subject: Re: ISS Proventia G100's

    > http://www.scmagazine.com/products/index.cfm?
    > fuseaction=GroupTestDetails&GroupId=19076
    >
    >
    > On Jul 21, 2005, at 9:53 PM, Leigh Anderson wrote:
    >
    > > Hi,
    > >
    > > We are looking at the ISS Proventia G100 Boxes as an option for one
    > > of our clients, I am keen to hear any good/bad reports about them,
    > > effectiveness, and any other comments you might have.
    > >
    > > Thanks in advance,
    > >
    > > Leigh Anderson
    > >
    > >
    > > - Leigh Anderson - [ Internode - Agile Communications ] -
    > > - Ph 08 8228 2999 - [Level 2 / Corporate Support & Provisioning] -
    > > - Mb 0400 292 494 - [ landerso@internode.com.au ] -
    > >
    > >
    > > ----------------------------------------------------------------------
    > > --
    > > Test Your IDS
    > >
    > > Is your IDS deployed correctly?
    > > Find out quickly and easily by testing it with real-world attacks
    > > from CORE IMPACT.
    > > Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-
    > > ids_040708 to learn more.
    > > ----------------------------------------------------------------------
    > > --
    > >
    > >
    >
    >
    > ------------------------------------------------------------------------
    > Test Your IDS
    >
    > Is your IDS deployed correctly?
    > Find out quickly and easily by testing it
    > with real-world attacks from CORE IMPACT.
    > Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
    > to learn more.
    > ------------------------------------------------------------------------
    >

    ------------------------------------------------------------------------
    Test Your IDS

    Is your IDS deployed correctly?
    Find out quickly and easily by testing it
    with real-world attacks from CORE IMPACT.
    Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
    to learn more.
    ------------------------------------------------------------------------

  • Next message: Nakul Aggarwal: "Re: [BULK] Applying data mining to Intrusion Detection System"

    Relevant Pages

    • Re: Core Impact references
      ... There are several ways to accomplish what you need within CORE IMPACT. ... > can reduce the chances of the attacks being noticed. ... >>Hackers are concentrating their efforts on attacking applications on ... Check your website for ...
      (Pen-Test)
    • Re: SSL - Man-in-the-Middle filtering
      ... spoofed the connection?what IPS will do in tht case?discard the ... If you are looking for attacks against SSL, IPSEC, etc... ... attacks from CORE IMPACT. ...
      (Focus-IDS)
    • RE: Core Impact references
      ... Core Impact is amazing; I've used it in the past. ... Audit your website security with Acunetix Web Vulnerability Scanner: ... Hackers are concentrating their efforts on attacking applications on ... Up to 75% of cyber attacks are launched on shopping carts, ...
      (Pen-Test)
    • RE: Comparison Between IDS / IPS Products
      ... All our reports are freely available on our web site - we have even removed ... All that is missing from the on-line versions are the complete benchmark ... >> attacks from CORE IMPACT. ...
      (Focus-IDS)
    • Re: Fwd: Solaris 10 x86 HIDS
      ... > with real-world attacks from CORE IMPACT. ... delivery of this message to an intended recipient), ...
      (Focus-IDS)