Re: IDS data collection _outside_ of a firewall

[roger nebel <roger () homecom com>]

from my experience with dod and other us agencies, and the largest
commercial entities (think fortune 10), it's clear to me that dominique
is dead on correct.  

who cares how many people stopped at the red light?  they stopped, end
of story, see ya.  it's the jerks who ran it that you are interested in
... as one very large retail customer once told me "what could I
possibly care about that which does not help or hinder us selling
socks?" 

--roger

Dominique Brezinski wrote:
> At 10:33 PM 1/19/99 -0800, John Kozubik wrote:
> > > Also, the comment on having ID sensors outside the firewall is also
> > > equally flawed.
> >
> > I must respectfully disagree.
> >
> > Please refer to:
> >
> > http://www.nswc.navy.mil/ISSEC/CID/
>
> Notice the source of this information - DoD.  As I mentioned in my post,
> the only organizations that have the resources necessary to implement a
> cyber threat detection (notice I did not use the term "intrusion
> detection," ... are DoD ...

[snip]

Attachment: roger.vcf
Description: Card for roger nebel