Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Don't blame the IDS
Don Parker, 2007-11-09

Some years ago, I remember reading a press release from the Gartner Group. It was about intrusion detection systems (IDS) offering little return for the monetary investment in them and furthermore, that this very same security technology would be obsolete by the year 2005. A rather bold statement and an even bolder prediction on their part.

Comments Mode:
Don't blame the IDS 2007-11-10
Anonymous
Don't blame the IDS 2007-11-11
Param
Yes, let's blame the IDS 2007-11-12
assurbanipal (1 replies)
Re: Yes, let's blame the IDS 2007-11-13
Anonymous
Don't blame the IDS 2007-11-12
Gandalf
Don't blame the IDS 2007-11-12
Anonymous (1 replies)
Re: Don't blame the IDS 2007-11-13
Ryan Wegner
Don't blame the IDS 2007-11-13
Anonymous
Nice article..
There is no substitute for manual review of IDS logs in order to be effective. The same goes for software development testing.. there is only so much you can automate with tools.
Is it a boring, mundane job to manually review logs or test software? Yes..
Is it necessary for good security and good coding practices? ABSOLUTELY.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/457/34794#34794
Don't blame the IDS 2007-11-14
John Sloan (1 replies)
Re: Don't blame the IDS 2007-11-17
Ari Takanen (Codenomicon)
Don't blame the IDS 2007-11-19
Anonymous
NSM == IDS++ 2007-11-26
Hanashi
Don't blame the IDS 2009-08-14
Anonymous







 

Privacy Statement
Copyright 2009, SecurityFocus