Re: Firewalls (was Re: IDS evaluations procedures)

[Stefano Zanero <zanero () elet polimi it>]

Sanjay Rawat wrote:

> During my research, i experimented with many such techniques, but I dont
> find the acceptability of such techniques in commercial products. I know

The false positive rate of most data-mining based techniques is probably
still too high for commercial uses.

<shameless promotion>
Those who are interested can have a look at my Black Hat slides from
last year
http://blackhat.com/presentations/bh-usa-04/bh-us-04-zanero.pdf
</shameless promotion>

Best,
Stefano Zanero

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
------------------------------------------------------------------------