RE: How to choose an IDS/FW MSS provider

["Stuart Staniford" <stuart () nevisnetworks com>]

David Goodrum wrote:

> And yes, 
> it's possible 
> to compromise systems that are simply sniffing... but it's 
> much harder.  
> I know of only one product that's been successfully remotely 
> exploited 
> in this manner, and the only reason that happened was because 
> it was an 
> opensource product that allows hackers to read the source 
> code and look 
> for ways to compromise it.

Mmmm.  The Witty worm last year compromised ISS deployments in this manner.

Stuart.

Stuart Staniford, Principal Scientist
Nevis Networks
stuart () nevisnetworks com
408-327-4652


--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from 
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
--------------------------------------------------------------------------