AW: looking for wireless IDS whitepaper

From: Holger Reichert (holger.reichert_at_holysword.de)
Date: 08/29/05

  • Next message: Hazel, Scott A.: "RE: Snortcenter, Prelude-IDS - How does it compare to Sguil?"
    To: <focus-ids@lists.securityfocus.com>
    Date: Mon, 29 Aug 2005 09:54:26 +0200
    
    

    Dear Arian

    the Google query should look like this, if I guessed the paper right:
    Session +Containment +Joshua +Wright

    With kind regards
    Holger Reichert
    Owner Manager
    Holysword GbR

    -----Ursprungliche Nachricht-----
    Von: Evans, Arian [mailto:Arian.Evans@fishnetsecurity.com]
    Gesendet: Freitag, 26. August 2005 18:49
    An: focus-ids@lists.securityfocus.com
    Betreff: looking for wireless IDS whitepaper

    I recently (<=2 months) read a wireless IDS
    whitepaper discussing four + wireless IDS/IPS
    vendors and the utility of their "security"
    mechanisms. Alas, I cannot find this pdf anywhere.

    It covered things like dropping disassociation
    packets by changing the linux ip stack to ignore
    the disassociation bit, etc.

    Nice short read, very politically correct regarding
    the various vendors implementing dubious controls.
    Had a little chart of what vendors implement what
    control/defense mechanisms.

    Anyone know what paper I am speaking of and have
    a link to it? Feel free to be a smartass and send
    me the correct Google query. Many thanks,

    -ae

    ------------------------------------------------------------------------
    Test Your IDS

    Is your IDS deployed correctly?
    Find out quickly and easily by testing it
    with real-world attacks from CORE IMPACT.
    Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
    to learn more.
    ------------------------------------------------------------------------

    ------------------------------------------------------------------------
    Test Your IDS

    Is your IDS deployed correctly?
    Find out quickly and easily by testing it
    with real-world attacks from CORE IMPACT.
    Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
    to learn more.
    ------------------------------------------------------------------------


  • Next message: Hazel, Scott A.: "RE: Snortcenter, Prelude-IDS - How does it compare to Sguil?"

    Relevant Pages

    • Re: IDSIPS that can handle one Gig
      ... Well, as a greedy IPS reseller, what would you recommend to handle 4 ... >We are currently evaluating IDS\IPS vendors. ... >Find out quickly and easily by testing it with real-world attacks from ... >CORE IMPACT. ...
      (Focus-IDS)
    • RE: Juniper Vs Tipping point, Intrushield and Stonegate
      ... All the vendors are alike somehow... ... Security Solutions Advisor ... Find out quickly and easily by testing it with real-world attacks from ... with real-world attacks from CORE IMPACT. ...
      (Focus-IDS)
    • Re: IDSIPS that can handle one Gig
      ... PGP: Server - keyserver.pgp.com ... We have tried two vendors, ... > Find out quickly and easily by testing it with real-world attacks from ... > CORE IMPACT. ...
      (Focus-IDS)
    • IDSIPS that can handle one Gig
      ... each has four gig fiber segments. ... We are currently evaluating IDS\IPS vendors. ... Find out quickly and easily by testing it with real-world attacks from ... CORE IMPACT. ...
      (Focus-IDS)
    • RE: looking for wireless IDS whitepaper
      ... Thanks for the link (and thanks to the individual who sent me the Google query:). ... And thanks for writing the paper. ... or pepper the focus-ids list at your own discretion. ... with real-world attacks from CORE IMPACT. ...
      (Focus-IDS)