RE: host-based ips ?

["Adam Powers" <apowers () lancope com>]

Assuming "ips" in this context is an acronym for "Intrusion Prevention
Systems", yes: Okena and Entercept.

Both are "shim" technologies that exist as an agent on the host itself.

On the open source side, you could look into systrace.


Not sure on Entercept but Okena's technology looks promising (Cisco
thought so anyway).




-----Original Message-----
From: Quynh Nguyen Anh [mailto:quynh () sfc keio ac jp] 
Sent: Thursday, April 17, 2003 8:33 AM
To: focus-ids () securityfocus com
Subject: host-based ips ?

hello,

there are some nips (network based ips), but i never ever heard about 
host based ips. any body have known about this?

thanh you a lot.
-- 
Quynh


------------------------------------------------------------------------
------
INTRUSION PREVENTION: READY FOR PRIME TIME?
 
IntruShield now offers unprecedented Intrusion IntelligenceTM
capabilities - 
including intrusion identification, relevancy, direction, impact and
analysis - enabling a path to prevention. 
 
Download the latest white paper "Intrusion Prevention: Myths,
Challenges, and Requirements" at:
http://www.securityfocus.com/IntruVert-focus-ids




------------------------------------------------------------------------------
INTRUSION PREVENTION: READY FOR PRIME TIME?

IntruShield now offers unprecedented Intrusion IntelligenceTM capabilities -
including intrusion identification, relevancy, direction, impact and analysis - enabling a path to prevention.

Download the latest white paper "Intrusion Prevention: Myths, Challenges, and Requirements" at: 
http://www.securityfocus.com/IntruVert-focus-ids