Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: IDS vs. IPS deployment feedback |
|---|---|
| Date: | Sun, 16 Apr 2006 17:31:37 +0200 |
Aaron wrote:
To add to (or take away) from this thread, I would further mention that IDS/IPS regardless of make or implimentation, will only see the past, not the future.
You may wish to notice that this is true, but a problem only for misuse based devices. Anomaly based devices, on the contrary, use the past as a way to detect anomalies into the future, and therefore are less sensitive to the zero-day/unforeseen attack problem. Stefano ------------------------------------------------------------------------ Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more. ------------------------------------------------------------------------
| Previous by Date: | Re: Simulating Retransmissions, Mike Gibson |
|---|---|
| Next by Date: | RE: IPS false positives, Basgen, Brian |
| Previous by Thread: | Re: IDS vs. IPS deployment feedback, Aaron |
| Next by Thread: | Re: IDS vs. IPS deployment feedback, Thomas Choi |
| Indexes: | [Date] [Thread] [Top] [All Lists] |