|
|
|
Date Submitted:
08/18/05
Hits: 42 Rating:  based on 0 votes
Understanding IDS Active Response MechanismsAdded by Papergrl
Description:
Debates still rage in the developer community over which methods of detecting attackers are best, but IDS customers as a whole are satisfied with the current IDS technology. To get an edge on the competition, many of the IDS vendors are adding active response capabilities to their products. The concept underlying this tactic is that the IDS will detect an attacker and then move to stop his attack. The problem is that any attacker with a basic knowledge of TCP/IP can easily defeat these mechanisms directly or simply knock the network offline often enough that the Admin is forced to turn off the feature. It is important for Admins to know the limitations of active response mechanisms to avoid being blindsided by them.
Read the Complete Paper You don't have permission to post replies. Please login or register. |