RE: IDS and Firewall

["Shaffer, Paul D" <paul.d.shaffer () lmco com>]

At 07:46 PM 4/28/2004, Matt Kettler wrote:

> There are others (ie: Paul) who feel it's better to make the 
> compromise in order to gain the benefits of having an IDS on hand.

Matt, I had to start over because I was got dizzy trying to follow the back and forth in that offline email we had 
going.  I appreciate you ceding this point.  And I remember when those two vulnerabilities you mentioned (in our 
offline conversation) came out last year, but don't recall hearing about them ever being successfully exploited.

I'm sure you'll agree that generally speaking, computer security is all about countering or mitigating risk.  The old 
saying about the computer locked in a safe at the bottom of the ocean comes to mind.  True absolutes a few and far 
between.  Everything is a compromise at some level.

Taking calculated risks is a tried and true tactic for gaining the advantage over your adversary.  Being at risk and 
knowing it better than a false sense of security.  Don't miss the forest for the trees...

v/r

Paul


-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE. 
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users