SecurityFocus new article announcement

From: Kelly Martin (kel_at_securityfocus.com)
Date: 12/30/03

  • Next message: Alvin Oga: "Re: compromised network"
    Date: Tue, 30 Dec 2003 09:36:18 -0700 (MST)
    To: security-basics@securityfocus.com
    
    

    The following article was published on SecurityFocus today:

    Checklist for Deploying an IDS
    By Andy Cuff Dec 30, 2003

    The scope of this article considers the worst case scenario, that of
    deploying a Network IDS on a remote network (target). The introduction of
    an IDS into a organization's network can be sensitive and often has
    political implications with the network staff, and thus a checklist
    written from the perspective of an outside consultant (even if the IDS is
    deployed internally) that appeases all parties can be useful to ensure a
    successful implementation.

    http://www.securityfocus.com/infocus/1754

    -- Kelly Martin SecurityFocus kel@securityfocus.com +001-403-261-5468

    ---------------------------------------------------------------------------
    ----------------------------------------------------------------------------


  • Next message: Alvin Oga: "Re: compromised network"

    Relevant Pages

    • IDS testing...again [WAS: Re: (OpenBSD or Linux)]
      ... Subject: IDS testing...again ... Snort was using more than 33% CPU more than Prelude ... But if you are deploying multiple NIDS devices, crikey, even at ... I don't want to promote vendor ...
      (Focus-IDS)
    • RE: IDS vs. IPS deployment feedback
      ... Totally agree with you Intrusion Detection is not dead. ... IPS is a great benefit, but if you have a network that changes then it ... you still have to run it in an IDS mode to ... Much of the rhetoric and push for deploying IPS devices that are ...
      (Focus-IDS)
    • Article Announcement: Checklist for Deploying an IDS
      ... Checklist for Deploying an IDS ... The scope of this article considers the worst case scenario, ... deploying a Network IDS on a remote network. ...
      (Focus-Microsoft)
    • Re: Re: Triggering IDS
      ... If it doesn't ring the alarm either it's not working or you need a different IDS. ... deploying an IDS that I expect it not to work once I have finished ... So although they have alerts, they are still missing a significant ... vulnerability management needs. ...
      (Pen-Test)
    • Re: IDS and NMS
      ... Start by designing and installing a network. ... Next, a more detailed view of the network is required, so a NMS is ... the network administrator wants to see what ... This is where integrating the IDS console into the NMS makes sense. ...
      (Focus-IDS)