Re: IDS is dead, etc

["M. Dodge Mumford" <dodge () dmumford com>]

Paul Schmehl said:

> This brings up what I guess is a philosophical question.  Why would you 
> want to know about Nimda attacks against your servers?  If you're properly 
> secured, they won't have any effect.  And if you're not, you'll know about 
> them soon enough.

I speak for myself, not my employer, NFR.

All of Bennett Todd's points are correct, but I would add one more: The
folks who test NIDS have a field day when you don't detect the stupid,
common stuff. Disabling the checks for issues you don't care about is key
for any successfuly NIDS deployment.

-- 

Dodge

Attachment: _bin
Description: