RE: Current IDS problems

["Vipul Kumra" <vipul.kumra () airtightnetworks net>]

They do but only partially. It also depends upon how good your
vulnerability correlation algorithm is.

Vipul Kumra



-----Original Message-----
From: Nakul Aggarwal [mailto:nakula () gmail com] 
Sent: Monday, October 24, 2005 3:56 AM
To: crazy frog crazy frog
Cc: zero; focus-ids () securityfocus com
Subject: Re: Current IDS problems

doesn't the existing correlation tools solve the problem of false alerts
:-?

regards

On 10/21/05, crazy frog crazy frog <i.m.crazy.frog () gmail com> wrote:
> false positives.allthough we need to fine tune it to reduce this
stuff.
> On 10/19/05, zero <zeroboy () arrakis es> wrote:
> > Hi all,
> >    I would like to know what are the problems people working with
IDS sees in
> >    them. I mean, what are the things you hate about IDS, think
simply you feel
> >    are plain wrong or that they should be another way to it.
> >
> >    Al comments are greatly appreciated :)
> >
> >    Thxs in advance.
------------------------------------------------------------------------
> > Test Your IDS
> >
> > Is your IDS deployed correctly?
> > Find out quickly and easily by testing it
> > with real-world attacks from CORE IMPACT.
> > Go to
http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
> > to learn more.
------------------------------------------------------------------------
> >
>
>
> --
> ting ding ting ding ting ding
> ting ding ting ding ding
> i m crazy frog :)
------------------------------------------------------------------------
> Test Your IDS
>
> Is your IDS deployed correctly?
> Find out quickly and easily by testing it
> with real-world attacks from CORE IMPACT.
> Go to
http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
> to learn more.
------------------------------------------------------------------------
>


--
regards
Nakul Aggarwal

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708

to learn more.
------------------------------------------------------------------------





------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
------------------------------------------------------------------------