[LUGOS-SEC] Re: [LUGOS] IDS

[Adrijana Perič]

On Fri, 2 Jul 2004 13:55:21 -0000
Iztok Umek <iztok at si-con.com> wrote:

> 
> Adrijana Peri_ <adrijana.peric at guest.arnes.si> said:
> 
> > Prosim, da ne ma_ate Proventije in ostalih produktov ISS.
> > ISS network,server sensor in Desktop Protector _e zmeraj delujeta na "Signature
> based" tehnologiji.
> 
> 
> Da se ne bomo kregal. Ni res :)
To kar trdiš je sicer res. Ampak za tak način analize rabis Fusion modul in ISS internet scaner 70. To pomeni redno pregledovanje omrežja.
Kaj pa cena?

> 
> Preventija je samo ISS "packaged" RealSecure Network Sensor, ki je dejansko
> hibriden, ampak vecina je "anomaly based".
> 
> ISS je to naredil s svojo verzijo 7.0.
> 
> http://documents.iss.net/literature/RealSecure/rsn_faq.pdf
> 
> Hybrid detection technology – Employs a powerful combination of sophisticated,
> 7-layer
> protocol analysis and attack pattern matching detection technologies to
> interpret network
> activity. This technique is the most accurate and modern method of intrusion
> detection and
> is used to foil hacker evasion techniques, even detecting some attacks before
> they become
> widely known.
> 
> 
>