Re: IDS detection approaches

["Randal T. Rioux" <randy () procyonlabs com>]

Gary Halleen wrote:
<snip>
> Additionally, all Cisco IPS signatures are open.  You are able to view all
> or most fields of signatures, create your own, and modify existing
> signatures.  You do not need to wait for Cisco to release new signatures if
> you have sufficient IDS/IPS skills to write a new signature.  If you can
> write a snort rule, you can write a Cisco IPS signature.

Open? Really? Where can I download them?

Thanks,
Randy

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw 
to learn more.
------------------------------------------------------------------------