Re: Intrusion Detection

["M. Dodge Mumford" <dmumford () nfr net>]

On Tue, 14 Apr 1998, Marcus J. Ranum wrote:
>       There are really only 2 good reasons I can think of for ID systems:
> 1) To develop a threat level model as to how often you are attacked
> 2) To detect clueless people inside your organization who are attacking
>       outside sites

You're forgetting about the twinks who are attacking your internal
network, of course. Becuase in all likelihood they're already in the soft,
squishy center.

-----
Dodge   dodge () nfr net        PGP key available upon request