Snort mailing list archives

Re: Security Analogies


From: Joel Esler <jesler () sourcefire com>
Date: Fri, 17 Dec 2010 18:18:04 -0500

Parker,

Thanks for the positive feedback.  I'm trying to line some up some good and different content for the blog from many 
different sources in the company.  If anyone has an ideas about things you'd like to know more about, and would like to 
write about, we'd love to hear it.

J

On Dec 17, 2010, at 4:15 PM, Crook, Parker wrote:

[QUOTE, from http://blog.snort.org/2010/12/can-you-hold-your-data.html]
 
The value in farming corn is not simply having grown it, but that it can be transformed into something people want to 
consume. To continue to belabor this contrived analogy, we don’t just want to grow corn, we want to harvest it and 
turn it into a nice sour mash whiskey. Drinking whiskey is a lot like analyzing IPS alerts. The first sip you ever 
have is strange and burns. But once you develop a taste for it, it’s delicious. Then the first couple drinks are 
good, and sometimes the next couple are even better. But eventually having more makes you sick, and in obscene 
amounts it can even kill you.
 
[END QUOTE]
 
Usually in my business I hear a lot of car-analogies, so it’s refreshing to see the one above on the new snort blog.  
Brilliant!  I would like to point out in a meta- kind of way, that IPS alerts can actually kill you… enter 
stage-left, The Snort Drinking Game!
 
So here’s a toast to properly tuned systems and not killing yourself with alerts.
 
P.S. Thanks for revived/new blog.
------------------------------------------------------------------------------
Lotusphere 2011
Register now for Lotusphere 2011 and learn how
to connect the dots, take your collaborative environment
to the next level, and enter the era of Social Business.
http://p.sf.net/sfu/lotusphere-d2d_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

------------------------------------------------------------------------------
Lotusphere 2011
Register now for Lotusphere 2011 and learn how
to connect the dots, take your collaborative environment
to the next level, and enter the era of Social Business.
http://p.sf.net/sfu/lotusphere-d2d
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: