|
-
March 11th, 2008, 08:32 AM
#1
 Originally Posted by nihil
For that reason I have always found IDS a strange concept. I don't want to know that someone has broken into my machine............ I want to know that an attempt was made, and that it was prevented.
Isn't that why there are now IPS's?
-
March 11th, 2008, 08:58 AM
#2
Isn't that why there are now IPS's?
Exactly! that is what I would expect to find in a production environment. The IDS comes into its own when you are attempting to analyse intruder activity without alerting or preventing them.
I would typically associate that with some sort of honeypot.
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|