Full Disclosure mailing list archives
Re: Is Marty Lying?
From: Justin <justin-fulldisclosure () soze net>
Date: Tue, 23 Sep 2003 14:47:21 +0000
Florin Andrei (2003-09-22 23:25Z) wrote:
On Mon, 2003-09-22 at 14:13, security snot wrote:"Detect intrusions" - if you can set an IDS signature for something, then you shouldn't be vulnerable to it. So the functionality of IDS is to tell you when you've been compromised by six-month old public vulnerabilities that dvdman has finally gotten his hands on an exploit for, that you never bothered to patch for?True, in an ideal world. However, in the _real_ one, things are slightly different. Especially on large networks (> thousands of systems), funny things start to happen.
Not even true in the ideal world. You can add IDS sigs for symptoms of breakins (e.g. shellcode) rather than vuln-specific signatures. But perhaps security snot has some magical cure for every possible unidentified remote security flaw? -- No man is clever enough to Times are bad. Children no longer know all the evil he does. obey their parents, and everyone -Francois de la Rochefoucauld is writing a book. -Cicero _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Re: Is Marty Lying?, (continued)
- Re: Is Marty Lying? Blue Boar (Sep 22)
- Re: Is Marty Lying? security snot (Sep 23)
- Please don't feed the troll (was: Re: Is Marty Lying?) Cael Abal (Sep 23)
- Re: Is Marty Lying? Peter Busser (Sep 22)
- Re: Is Marty Lying? Gregory A. Gilliss (Sep 22)
- Re: Is Marty Lying? security snot (Sep 22)
- Re: Is Marty Lying? pdt (Sep 22)
- Re: Is Marty Lying? Florin Andrei (Sep 22)
- Re: Is Marty Lying? Justin (Sep 23)
- Re: Is Marty Lying? Paul Schmehl (Sep 22)
- Re: Is Marty Lying? Valdis . Kletnieks (Sep 22)
- The usefullness of IDSes (Was: Re: Is Marty Lying?) Peter Busser (Sep 23)
- RE: The usefullness of IDSes (Was: Re: Is Marty Lying?) Philippe Bogaerts (Sep 23)
- RE: The usefullness of IDSes (Was: Re: Is Marty Lying?) Cedric Blancher (Sep 23)