IDS mailing list archives
Re: IDS\IPS that can handle one Gig
From: Control Zed <cntlzed () gmail com>
Date: Tue, 7 Jun 2005 21:06:09 +0530
Frank, Sometimes it may not be possible to patch critical servers simply because you can't afford the downtime or you don't know if the patches would break other critical applications or software. So if you know the vulnerability and the way it can be exploited, you can protect it till you can find time to patch it. Nothing wrong in this approach. I am assuming this is what Lucid means by VM. Z On 6/7/05, Frank Knobbe <frank () knobbe us> wrote:
On Sun, 2005-06-05 at 03:39 -0400, Vikram Phatak wrote:The biggest knock I've heard about VM is that it doesn't actually "protect" anything since it is not patching vulnerablities.I think this single line shows the biggest problem in the security industry, the need to protect vulnerabilities. Instead of adding layers to protect the bag of vulnerabilities, we should open the bag and remove the vulnerabilities one by one. The term vulnerability management is equally flawed. We should not at all "manage" vulnerabilities, but "identify" and "eradicate" them. The whole notion of keeping vulnerabilities around is just flawed... ... and I wonder if IPSes just foster the complacency to accept and live with vulnerabilities... Cheers, Frank BodyID:1871399.2.n.logpart (stored separately)
-------------------------------------------------------------------------- Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more. --------------------------------------------------------------------------
Current thread:
- RE: IDS\IPS that can handle one Gig Andrew Plato (Jun 01)
- RE: IDS\IPS that can handle one Gig Peter Schawacker (Jun 01)
- Re: IDS\IPS that can handle one Gig Vikram Phatak (Jun 06)
- Re: IDS\IPS that can handle one Gig Frank Knobbe (Jun 07)
- Re: IDS\IPS that can handle one Gig Control Zed (Jun 07)
- Re: IDS\IPS that can handle one Gig Frank Knobbe (Jun 08)
- Re: IDS\IPS that can handle one Gig Terry Vernon (Jun 08)
- Re: IDS\IPS that can handle one Gig Vikram Phatak (Jun 06)
- RE: IDS\IPS that can handle one Gig Peter Schawacker (Jun 01)
- <Possible follow-ups>
- RE: IDS\IPS that can handle one Gig Palmer, Paul (ISSAtlanta) (Jun 01)
- Re: IDS\IPS that can handle one Gig Ed Gibbs (Jun 04)
- Re: IDS\IPS that can handle one Gig Bob Walder (Jun 04)
- Re: IDS\IPS that can handle one Gig Bob Walder (Jun 05)
- Re: IDS\IPS that can handle one Gig Per Engelbrecht (Jun 01)
- RE: IDS\IPS that can handle one Gig Prashant Khandelwal (Jun 01)
- RE: IDS\IPS that can handle one Gig THolman (Jun 01)