IDS mailing list archives
Re: IPS, alternative solutions
From: Scott Wimer <scottw () cylant com>
Date: Wed, 15 Sep 2004 10:21:23 -0400
Daniel, I agree with your assessment. What I have encountered in the financial sector though is a desire to have the packets "scrubbed" before they reach the servers. People _want_ to deploy network based IPS tools because it is easier and more cost effective. That it doesn't seem to be possible yet is another story altogether. Regards, Scott Wimer On Tue, 2004-09-14 at 06:01, Daniel wrote:
So far there has been a load of talk discussing which is the better technology. Personally i dont think IPS is ready for the big time. Yeah its great for small mum and dad networks, but for large financial networks with billions of pounds flowing across them, would you trust a technology to think and block what it seems as bad traffic? So what are the alternatives? I'd say more host based protection such as: - Stack protection - Application level firewalls (ModSecurity/SecureIIS) - Host based firewalls I'm interested to see what everyone else feels are alternatives to IPS -------------------------------------------------------------------------- Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more. --------------------------------------------------------------------------
-- Scott M. Wimer Cylant www.cylant.com 91 Hartwell Ave v. (781) 402-0005 x238 Lexington, MA 02421 c. (781) 552-9525 There is no Security without Control. -------------------------------------------------------------------------- Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more. --------------------------------------------------------------------------
Current thread:
- IPS, alternative solutions Daniel (Sep 15)
- Re: IPS, alternative solutions Scott Wimer (Sep 15)
- Re: IPS, alternative solutions Jason (Sep 16)
- Re: IPS, alternative solutions Scott Wimer (Sep 15)
- Re: IPS, alternative solutions Jason Haar (Sep 16)
- Re: IPS, alternative solutions Jason (Sep 16)
- Re: IPS, alternative solutions Alex Butcher, ISC/ISYS (Sep 15)
- Re: IPS, alternative solutions Andy Cuff (Sep 16)
- <Possible follow-ups>
- Re: IPS, alternative solutions Johann_van_Duyn (Sep 15)
- RE: IPS, alternative solutions Palmer, Paul (ISSAtlanta) (Sep 17)
- Re: IPS, alternative solutions Jason (Sep 17)
- RE: IPS, alternative solutions Murtland, Jerry (Sep 17)
- RE: IPS, alternative solutions Cure, Samuel J (Sep 21)
(Thread continues...)
- Re: IPS, alternative solutions Scott Wimer (Sep 15)