RE: IDS and Spywares

["Andrew Plato" <andrew.plato () anitian com>]

A lot of the commercial ones do. TippingPoint has quite a few spyware
signatures. ISS has some. Don't know about Symantec or Cisco. 

Some AV will detect spyware, but not all. And even then, AV tends not to
be very good at blocking communication of already installed spyware. 


___________________________________
Andrew Plato, CISSP
President/Principal Consultant
Anitian Enterprise Security



-----Original Message-----
From: neelabhsharma1 () gmail com [mailto:neelabhsharma1 () gmail com] 
Sent: Thursday, October 06, 2005 11:13 PM
To: focus-ids () securityfocus com
Subject: IDS and Spywares

Could anyone in the group name a few IDS which detect spywares. In my
view spywares are to be detected by an antivirus system and not by a
network device.

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
------------------------------------------------------------------------




------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
------------------------------------------------------------------------