Re: IDS is dead, etc

[Dragos Ruiu <dr () kyx net>]

The problem with the discussion here is that everyone is 
preaching to the choir in violent agreement.

If you are subscribed to focus-ids, it is a fair bet to say that 
you've bought into IDS methodology to some degree or are
a vendor.

But that Gartner report will be distributed to countless journalists
and "business analysts" who are going to make hassles for the IT
managers trying to justify their IDS purchase requests. These
people will be preaching the <ahem> "informed" conclusions 
that Gartner is espousing as gospel.

IMHO what the industry should be doing is putting together some
kind of letter undersigned by a lot of name brand IDS propellerheads (:-)
that says "Gartner is full of it" and sending it out to the Rob Lemoses
and other trade press journalists of the world. The trade press loves
the mud-slinging... Surely your marketing folks pay some money for 
those PR consultants - use them :-). Or better yet, fire them because 
they haven't suggested this yet. :-P

Just some coaching from the sidelines :-). (That will be 25c please...)

cheers,
--dr

-- 
pgpkey http://dragos.com/ kyxpgp

-------------------------------------------------------------------------------
Attend the Black Hat Briefings & Training, July 28 - 31 in Las Vegas, the 
world's premier technical IT security event! 10 tracks, 15 training sessions, 
1,800 delegates from 30 nations including all of the top experts, from CSO's to 
"underground" security specialists.  See for yourself what the buzz is about!  
Early-bird registration ends July 3.  This event will sell out. www.blackhat.com
-------------------------------------------------------------------------------