Security Analogies

["Crook, Parker" <Parker_Crook () reyrey com>]

[QUOTE, from http://blog.snort.org/2010/12/can-you-hold-your-data.html]

The value in farming corn is not simply having grown it, but that it can be transformed into something people want to 
consume. To continue to belabor this contrived analogy, we don't just want to grow corn, we want to harvest it and turn 
it into a nice sour mash whiskey. Drinking whiskey is a lot like analyzing IPS alerts. The first sip you ever have is 
strange and burns. But once you develop a taste for it, it's delicious. Then the first couple drinks are good, and 
sometimes the next couple are even better. But eventually having more makes you sick, and in obscene amounts it can 
even kill you.

[END QUOTE]

Usually in my business I hear a lot of car-analogies, so it's refreshing to see the one above on the new snort blog.  
Brilliant!  I would like to point out in a meta- kind of way, that IPS alerts can actually kill you... enter 
stage-left, The Snort Drinking Game<http://blog.joelesler.net/the-snort-drinking-game>!

So here's a toast to properly tuned systems and not killing yourself with alerts.

P.S. Thanks for revived/new blog.

------------------------------------------------------------------------------
Lotusphere 2011
Register now for Lotusphere 2011 and learn how
to connect the dots, take your collaborative environment
to the next level, and enter the era of Social Business.
http://p.sf.net/sfu/lotusphere-d2d

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users