Re: Current IDS problems

[Mark Ryan del Moral Talabis <talabis () gmail com>]

Hi,

I myself find false positives a constant problem in IDS. We work with
honeypots so false positives are a lot less but in actual production
systems this might tend to be a problem.

Cheers!
Ryan Talabis
Philippine Honeynet Project
http://www.philippinehoneynet.org


On 10/19/05, zero <zeroboy () arrakis es> wrote:
> Hi all,
>   I would like to know what are the problems people working with IDS sees in
>   them. I mean, what are the things you hate about IDS, think simply you feel
>   are plain wrong or that they should be another way to it.
>
>   Al comments are greatly appreciated :)
>
>   Thxs in advance.
>
>
>
>
> ------------------------------------------------------------------------
> Test Your IDS
>
> Is your IDS deployed correctly?
> Find out quickly and easily by testing it
> with real-world attacks from CORE IMPACT.
> Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
> to learn more.
> ------------------------------------------------------------------------

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
------------------------------------------------------------------------