RE: Re: Evaluating IDS

Jay,

An ex colleague of mine has a useful software product called Traffic IQ
Pro for testing IDS & IPS's take a look at www.karalon.com

Hope this info helps

Matt

Matt Foster
VP of Sales
Cell: +1 650 515 5739
www.redseal.net
Security Risk Management, Visualize, Measure & Mitigate

See what the press are saying about us
http://www.darkreading.com/document.asp?doc_id=98957

http://www.networkworld.com/news/2006/061906-redseal.html



-----Original Message-----
From: jarleay@xxxxxxxxx [mailto:jarleay@xxxxxxxxx]
Sent: Thursday, July 20, 2006 7:34 AM
To: focus-ids@xxxxxxxxxxxxxxxxx
Subject: Re: Re: Evaluating IDS

I am performing the same test, but I only have 2 computers and 1 laptop.
They all run on windows xp. Can I create an environment for testing
different IDS and attack tools with the use of this? Do I need to
install perl and c++?



Cheers

Jay

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
------------------------------------------------------------------------


------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
------------------------------------------------------------------------

Relevant Pages

  • Re: RE: IDS testing tools
    ... Nessus is a bad choice to test IDS as it is a vulnerability scanner. ... >Find out quickly and easily by testing it with real-world attacks from CORE ... >with real-world attacks from CORE IMPACT. ...
    (Focus-IDS)
  • Re: Host Based IDS
    ... Assunto: RE: Host Based IDS ... Anitian Enterprise Security ... with real-world attacks from CORE IMPACT. ...
    (Focus-IDS)
  • RE: interesting paper on testing sig-based IDS
    ... to evasion (the actual evasion techniques are not ... interesting paper on testing sig-based IDS ... The mutation engine applies one or more mutant operators to ... > Find out quickly and easily by testing it with real-world attacks from ...
    (Focus-IDS)
  • RE: IDS
    ... Subject: IDS ... Safe Access that does pretty much what you describe. ... Find out quickly and easily by testing it with real-world attacks from ... with real-world attacks from CORE IMPACT. ...
    (Focus-IDS)
  • RE: IDS event filtering
    ... It is important to avoid tuning out real attacks when they happen by having over-pruned the inside attack tree... ... > ingress - egress firewall rules, IDS configs, or whatever. ... > CORE IMPACT. ... > Find out quickly and easily by testing it with real-world attacks from ...
    (Focus-IDS)