|
Colapse all |
Post message
Re: IDS vs Application Proxy Firewal & OT list bouncing 2008-10-27 Arian J. Evans (arian evans anachronic com) (1 replies) Re: IDS vs Application Proxy Firewal & OT list bouncing 2008-10-27 alfredhuger (at) winterhope (dot) com [email concealed] (alfredhuger winterhope com) Re: importing Snort rules into ISS RealSecure and/or Proventia? 2008-10-25 Robin Brown (brownian motion2000 gmail com) While OpenSignature is not a word processor, it does look I needed to be more specific with which OpenSignature product am talking about. I am not talking about about the digital signature product available on sourceforge but rather OpenSource the feature within ISS which allows you to create custom [ more ] [ reply ] Re: IDS vs Application Proxy Firewal 2008-10-24 alfredhuger (at) winterhope (dot) com [email concealed] (alfredhuger winterhope com) (1 replies) Arian, >Anyway, that said, the behavioral realm >is begging to be explored more. I'm surprised >none of the vendors have touched it. It >seems so promising. They have, the problem is in finding market applicability. This approach (and I expand this to behavioral protection in general) tends to be [ more ] [ reply ] Re: IDS vs Application Proxy Firewal 2008-10-25 Damiano Bolzoni (damiano bolzoni utwente nl) (1 replies) importing Snort rules into ISS RealSecure and/or Proventia? 2008-10-23 Robin Brown (brownian motion2000 gmail com) Has anyone out there had success with importing Snort rules into ISS RealSecure and/or Proventia? Supposedly you can import snort style rules into ISS's SiteProtector policies with the OpenSignature policies. The import feature said it would only take xml files so I used Word to convert my .rules fi [ more ] [ reply ] Re: Re: IDS vs Application Proxy Firewall 2008-10-22 ebennett taylorbean com An IDS usually uses specific signatures and compares them to the data passing through it in a non intrusive, transparent manner and takes no action, but just merely logs an event if it identifies one. Therefore it is reactive and it uses a negative enforcement model of identifying known "bad" traff [ more ] [ reply ] IDS vs Application Proxy Firewall 2008-10-21 maash rajani gmail com (3 replies) Can someone please explain how is an IDS different from an application proxy firewall in terms of what each of them looks for in a packet. ------------------------------------------------------------------------ Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing i [ more ] [ reply ] Re: IDS vs Application Proxy Firewall 2008-10-21 Stefano Zanero (s zanero securenetwork it) (1 replies) Re: IDS vs Application Proxy Firewall 2008-10-22 \Zow\ Terry Brugger (zow acm org) (1 replies) Re: IDS vs Application Proxy Firewall 2008-10-22 Stefano Zanero (s zanero securenetwork it) (1 replies) Re: Host Based IDS 2008-10-21 Stefano Zanero (s zanero securenetwork it) Rodrigo Montoro(Sp0oKeR) wrote: > I agree with Stefano about your tests (nids, hids, pattern matching, > anomaly is to difficult to compare =D ). I just wanna add some points > about OSSEC Just to clarify, since this is not the only message I received: I was not diminishing Daniel's work in any way [ more ] [ reply ] |
|
Privacy Statement |
On Fri, Oct 24, 2008 at 3:02 PM, alfredhuger (at) winterhope (dot) com [email concealed]
<alfredhuger (at) winterhope (dot) com [email concealed]> wrote:
> Arian,
>
>>Anyway, that said, the behavioral realm
>>is begging to be explored more. I'm surprised
>>none of the vendors have touched it. It
>>seems so promising.
>
> They have, th
[ more ] [ reply ]