Re: Hi, I want to study IPS

[Raistlin <raistlin () gioco net>]

Greg Martin wrote:
> Some vendors use a baseline of the network and take
> action if the baseline changes drasticly.  

Examples ?

> Some use a 'negative
> space' technique which allows only valid traffic and considers all
> other traffic as a dos and drops it completely.  

Again, examples ?

IMHO IPS are nothing more than an integration of a firewall and an IDS 
concept. As such, they are rather fuzzy and vaporwar-ish enough to be 
very marketable.

--
Stefano "Raistlin" Zanero
System Administrator Gioco.Net
public PGP key block at http://gioco.net/pgpkeys


---------------------------------------------------------------------------

---------------------------------------------------------------------------