RE: For those of you that don't know....

["Maynor, David (ISS Atlanta)" <dmaynor () iss net>]

You should preface your last statement with "I write exploits for a
living so I don't want people to buy a solution that actually stops
them." 

You can't say with a straight face they were doing better than everybody
else in the market, they are evaded by simple RPC fragmentation, even
SNORT catches that. ImmunitySec's own Canvas CRI turns it into swiss
cheese, from what I hear. 

What other NIPS/HIPS vendors are you speaking of? As far as I know Willy
Wonka got his Ompalompa's on spyware research now so the list of NIPS
that tippingpoint is better than has dropped a bit.

-----Original Message-----
From: Sinan Eren [mailto:sinan.eren () immunitysec com] 
Sent: Monday, December 13, 2004 2:39 PM
To: Maynor, David (ISS Atlanta)
Cc: dailydave
Subject: Re: [Dailydave] For those of you that don't know....

> Who knew PCRE was worth that much?

Compared to other marketed NIDS/NIPS tippingpoint was doing a much
better 
job. So it did not suprise me much.

Same could be said for Determina being so much better than all the other

marketted HIPS out there. So i expect to see some big acquisition in
that 
too. 

I would personally pick tippingpoint and determina if i was in a CSO 
or similar position. So standing from a technical point of view I would 
endorse both of these products.

cheers,
Sinan



_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
https://lists.immunitysec.com/mailman/listinfo/dailydave