IDS mailing list archives
Re: Gartner is Dead, nCircle, Fusion, asset-correlation--was-->False positives, negatives and don't cares
From: "Anton A. Chuvakin" <anton () chuvakin org>
Date: Wed, 20 Aug 2003 16:19:02 -0400 (EDT)
All,
3. Asset Valuation: create a combined asset value (CAV) metric based upon #2.
This is all very nice, but one of the major challenges here is that this "value" is inherently manual input (or computable from manual input). What's even worse, even the code to "program a human" to define such values manually is not written yet :-) Its just too fuzzy. Once, for example, I've heard an opinion that some BCP score or whatever can be used there, but even this turned out to be ineffective. Thus while some solutions do have the value field (such as for use in various risk assessment algorithms), I suspect few of the users actually define it. Best, -- Anton A. Chuvakin, Ph.D., GCI* http://www.chuvakin.org http://www.info-secure.org --------------------------------------------------------------------------- Attend Black Hat Briefings & Training Federal, September 29-30 (Training), October 1-2 (Briefings) in Tysons Corner, VA; the worldÂs premier technical IT security event. Modeled after the famous Black Hat event in Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors. Symanetc is the Diamond sponsor. Early-bird registration ends September 6 Visit: www.blackhat.com ---------------------------------------------------------------------------
Current thread:
- False positives, negatives and don't cares Martin Roesch (Aug 11)
- Re: False positives, negatives and don't cares Bennett Todd (Aug 11)
- Re: False positives, negatives and don't cares Martin Roesch (Aug 12)
- Re: False positives, negatives and don't cares Paul Schmehl (Aug 12)
- Gartner is Dead, nCircle, Fusion, asset-correlation--was-->False positives, negatives and don't cares Arian J. Evans (Aug 12)
- Re: Gartner is Dead, nCircle, Fusion, asset-correlation--was-->False positives, negatives and don't cares Mike Coliton (Aug 12)
- Re: Gartner is Dead, nCircle, Fusion, asset-correlation--was-->False positives, negatives and don't cares Martin Roesch (Aug 12)
- Re: Gartner is Dead, nCircle, Fusion, asset-correlation--was-->False positives, negatives and don't cares Anton A. Chuvakin (Aug 21)
- Re: False positives, negatives and don't cares Bennett Todd (Aug 11)