Re: IDS and Spywares

From: Gadi Evron (ge_at_linuxbox.org)
Date: 10/07/05

  • Next message: Jeff Dell: "RE: Open source GUI for Snort" 
    Date: Fri, 07 Oct 2005 22:22:37 +0200
To: neelabhsharma1@gmail.com

    neelabhsharma1@gmail.com wrote:
    > Could anyone in the group name a few IDS which detect spywares. In my view spywares are to be detected by an antivirus system and not by a network device.

    Bleeding-Snort does a lot of work on this.

            Gadi.

    ------------------------------------------------------------------------
    Test Your IDS

    Is your IDS deployed correctly?
    Find out quickly and easily by testing it
    with real-world attacks from CORE IMPACT.
    Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
    to learn more.
    ------------------------------------------------------------------------

  • Next message: Jeff Dell: "RE: Open source GUI for Snort"

    Relevant Pages

    • RE: IDS and Spywares
      ... iPolicy Networks Intrusion Prevention Firewall provides protection ... As a part of regular IDS/IPS signature ... Subject: IDS and Spywares ...
      (Focus-IDS)
    • IDS and Spywares
      ... ('binary' encoding is not supported, ... Could anyone in the group name a few IDS which detect spywares. ... In my view spywares are to be detected by an antivirus system and not by a network device. ... with real-world attacks from CORE IMPACT. ...
      (Focus-IDS)
    • Re: IDS Evaluation
      ... vulnerability scanning). ... We actually include a limited license copy of Core Impact with our ... Evaluation boxes that we ship so people can easily evaluate our IPS ... >> about the accuracy of the ids. ...
      (Focus-IDS)
    • Re: Value of IDS, ROI
      ... ROI in the operational risk arena. ... >>and possibly capable of showing a positive ROI, I wouldn't say that an IDS ... >>Your CIO should ultimately be concerned in preventing attacks, ... >>CORE IMPACT. ...
      (Focus-IDS)
    • Re: How to choose an IDS/FW MSS provider
      ... people's IDS technologies, their opaqueness drives a constant nagging ... If a "signature" is written properly then evading it will be ... ISS has had at least ... >> from CORE IMPACT. ...
      (Focus-IDS)