IDS mailing list archives

Re: need help


From: tcp fin <inet_inaddr () yahoo com>
Date: Tue, 10 Aug 2004 03:35:47 -0700 (PDT)

Hi Raj , 
well the major consideration in imlementation of IDS
is ,
1. Application that IDS understands 
2. Throuput (If its Inline) 
3. Signature fine tuning 
4. The signature database 
5. Support for detection based on anomaly 
All and above plus a good correlation engine which can
allow administrator to correlate teh events .
and a excellent admin to handle the IDS events and
interpret them '
regards 
inet 
--- Gudumba Raj MSc <nag_theindian () yahoo com> wrote:

Hello,
   I am on the way to analyze the present IDS
products
like Cisco, NFR, Juniper, Symantec, Triwire IDS
products. But testing isnt my job. But I would like
to
know what kinds of problems the present IDS products
facing. I have to address some of the challenges
that
the IDS world is facing. Could you please help me.
Thanks in advance.

=====
##############
Gudumba Raj(Naga Raj Peddisetty)
BjornkarrsGatan 11 c 33,
Linkoping,
SE-58436.
Fixed: +46-13-4731134,
GSM: +46-731-521053.


              
__________________________________
Do you Yahoo!?
Yahoo! Mail Address AutoComplete - You start. We
finish.
http://promotions.yahoo.com/new_mail 


--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with
real-world attacks from CORE
IMPACT.
Go to

http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.

--------------------------------------------------------------------------





                
__________________________________
Do you Yahoo!?
Yahoo! Mail - 50x more storage than other providers!
http://promotions.yahoo.com/new_mail

--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from CORE
IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more.
--------------------------------------------------------------------------


Current thread: