IDS mailing list archives

signature based IDS/IPS effectiveness


From: GMail <mayur100 () gmail com>
Date: Wed, 09 Jan 2008 13:29:14 +0530

focus-ids,

        How effective are signature based IDS/IPS systems on text based 
protocols which involves grammar like PL/SQL. Using PL/SQL I can write same 
query with different ways and different constructs that leads to different 
query patterns. So does not that mean stateless signature based IDS/IPS
are useless for database servers, etc.

Best Regards,
Mayur


------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw 
to learn more.
------------------------------------------------------------------------


Current thread: