, 2007-11-09
Some years ago, I remember reading a press release from the Gartner Group. It was about intrusion detection systems (IDS) offering little return for the monetary investment in them and furthermore, that this very same security technology would be obsolete by the year 2005. A rather bold statement and an even bolder prediction on their part.
Expand all |
Post comment

There is no substitute for manual review of IDS logs in order to be effective. The same goes for software development testing.. there is only so much you can automate with tools.
Is it a boring, mundane job to manually review logs or test software? Yes..
Is it necessary for good security and good coding practices? ABSOLUTELY.
[ reply ]
Link to this comment: http://www.securityfocus.com/comments/columns/457/34794#34794