Re: Anomaly based network IDS

[Dale Gardner <dale () marketfoundry com>]

How does it determine what is suspicious?

DRG

on 3/28/03 6:18 PM, Brian Hernacki at bhern () meer net wrote:

> Actually Manhunt's protocol anomaly detection monitors for both protocol
> deviations and 'compliant but suspicious' protocol activity.

-- 

Dale Gardner
dale_gardner () earthlink net


-----------------------------------------------------------
ALERT: Exploiting Web Applications- A Step-by-Step Attack Analysis
Learn why 70% of today's successful hacks involve Web Application
attacks such as: SQL Injection, XSS, Cookie Manipulation and Parameter 
Manipulation.
http://www.spidynamics.com/mktg/webappsecurity71