Re: Important Comments re: INtrusion Detection

["Steven M. Bellovin" <smb () research att com>]

At 01:17 AM 2/15/98 -0600, tqbf () secnet com wrote:
> > The most serious problem, of course, is that there is no a priori reason
> > to think that the IDS's stack is bug-free.  And if you penetrate it, you've
> > acquired control of a machine that is by definition a perfect sniffer --
> > for the dark side...
>
> Don't proxy firewalls, and intermediate systems in general, all share this
> problem? Or are you saying that as well?

Yes, they all share that problem.