[LUGOS-SEC] Re: [LUGOS] IDS

[Iztok Umek]

Adrijana Periè <adrijana.peric at guest.arnes.si> said:

> Prosim, da ne ma¹ate Proventije in ostalih produktov ISS.
> ISS network,server sensor in Desktop Protector ¹e zmeraj delujeta na "Signature
based" tehnologiji.


Da se ne bomo kregal. Ni res :)

Preventija je samo ISS "packaged" RealSecure Network Sensor, ki je dejansko
hibriden, ampak vecina je "anomaly based".

ISS je to naredil s svojo verzijo 7.0.

http://documents.iss.net/literature/RealSecure/rsn_faq.pdf

Hybrid detection technology – Employs a powerful combination of sophisticated,
7-layer
protocol analysis and attack pattern matching detection technologies to
interpret network
activity. This technique is the most accurate and modern method of intrusion
detection and
is used to foil hacker evasion techniques, even detecting some attacks before
they become
widely known.