IDS mailing list archives
Re: Changes in IDS Companies?
From: "Stephane Nasdrovisky" <stephane.nasdrovisky () uniway be>
Date: Fri, 18 Oct 2002 10:49:18 +0200
Clint Byrum wrote:
Then the system is setup with schedules, to allow for the expected behaviors of arrivals and departures, cleaning, etc.
The analogy have its limitations. The alarm, in the public part of our building is shut down during business hours so that customers can enter our building. By analogy, I guess the IDS protecting our public servers should be turned off during business ours, which means, the IDS should always be down. The traditional alarm systems are in fact even weaker in term of false positive than most IDS, they do not seems to be a good goal for IDS developpers. Am I totally wrong ?
Other things just look suspicious, and we have to make a judgement call as to whether or not we're going to alert, or even shut down a connection, based on that suspicion. Now.. how to make that judgement call easy, is anyone's guess. :-P
My dream: an IDS that learns from past judgement.
Current thread:
- Re: Changes in IDS Companies?, (continued)
- Re: Changes in IDS Companies? Scott Wimer (Oct 31)
- RE: Changes in IDS Companies? Alan Shimel (Oct 16)
- RE: Changes in IDS Companies? Avi Chesla (Oct 16)
- RE: Changes in IDS Companies? Alan Shimel (Oct 16)
- Re: Changes in IDS Companies? Martin Roesch (Oct 16)
- RE: Changes in IDS Companies? Brian Brotschi (Oct 16)
- RE: Changes in IDS Companies? Ralph Los (Oct 17)
- Re: Changes in IDS Companies? Jason Falciola (Oct 17)
- Re: Changes in IDS Companies? Eye Dius (Oct 17)
- Re: Changes in IDS Companies? Clint Byrum (Oct 17)
- Re: Changes in IDS Companies? Stephane Nasdrovisky (Oct 18)
- Re: Changes in IDS Companies? scottw (Oct 18)
- Re: Changes in IDS Companies? Clint Byrum (Oct 17)
- RE: Changes in IDS Companies? tcleary2 (Oct 17)
- FW: Changes in IDS Companies? Avi Chesla (Oct 22)
- Re: Changes in IDS Companies? Proxy Administrator (Oct 25)
- Re: Changes in IDS Companies? Aaron Turner (Oct 25)
- Re: Changes in IDS Companies? A.S.Rajendran (Oct 25)
- Re: Changes in IDS Companies? Aaron Turner (Oct 25)
- Re: Changes in IDS Companies? Matt Harris (Oct 28)
- Re: Changes in IDS Companies? Aaron Turner (Oct 28)
- Re: Changes in IDS Companies? Matt Harris (Oct 29)