IDS mailing list archives
RE: Wishlist for IPS Products
From: <idswizard () earthlink net>
Date: Sat, 18 Sep 2004 10:28:58 -0400
Only way to do this and not create tons of false postives is true protocol
parsing. This knocks out most IPS vendors like Tipping Point. That is an interesting statement. Tipping Point claims to only have one customer experience a false positive and it was based on Chat traffic. During a SANS webcast, Los Alamos National Laboratory seemed to back that data (https://www.sans.org/webcasts/show.php?webcastid=90514). What test(s) have you done showing Tipping Point is prone to false positives based on their signatures/filters? -------------------------------------------------------------------------- Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more. --------------------------------------------------------------------------
Current thread:
- Re: Wishlist for IPS Products - HYBRID IPS, (continued)
- Re: Wishlist for IPS Products - HYBRID IPS Andy Cuff (Sep 14)
- Re: Wishlist for IPS Products Srinivasa Rao Addepalli (Sep 14)
- Re: Wishlist for IPS Products David Maynor (Sep 14)
- Re: Wishlist for IPS Products PS R (Sep 14)
- Re: Wishlist for IPS Products Tony Carter (Sep 17)
- Re: Wishlist for IPS Products PS R (Sep 17)
- Re: Wishlist for IPS Products David Maynor (Sep 21)
- Re: Wishlist for IPS Products David Maynor (Sep 20)
- Re: Wishlist for IPS Products David Maynor (Sep 22)
- Re: Wishlist for IPS Products PS R (Sep 24)
- Re: Wishlist for IPS Products David Maynor (Sep 20)