Re: Rather funny; looks like page defacement to me

[Michael Sierchio <kudzu () tenebras com>]

Anton Chuvakin wrote:

> My first impression was that it is a page defacement, so outrageous some
> claims are. For instance, did you know that IDS actually _cause_ incident
> response to happen? :-) Or this gem : "Money Slated for Intrusion
> Detection Should Be Invested in Firewalls"?

It's true that IDS is in its infancy, that many components have
a high cost of ownership, etc.  But none of the claims made were
supported by the facts offered.  Maybe it *is* a spoof. ;-)  It
wasn't dated April 1, though.

I found the slap against intrusion prevention to be really weird --
if by this we mean running audits (w/nessus et al) and hardening
systems or shutting off vulnerable services.

Also, there's only so much you can spend on firewalls -- and it's
not an either/or spending decision, and those of us *with* firewalls
are pursuing security in depth, and want host and network IDS, too.

It's a standard journalistic pose to debunk hype -- since Gartner
was responsible for so much of it during the Dot Com Bubble, maybe
this is their bid to regain credibility?  They want to claim that
their hype cycles are a valuation tool for technology companies.

Can you cure voodoo with voodoo?  Who's hyping what here?


        Gartner Hype Cycle for Information Security, 2003
        Price: US $ 495.00
        Pages: 12


Dada is not dead -- watch your overcoat!



-------------------------------------------------------------------------------
Attend the Black Hat Briefings & Training, July 28 - 31 in Las Vegas, the 
world's premier technical IT security event! 10 tracks, 15 training sessions, 
1,800 delegates from 30 nations including all of the top experts, from CSO's to 
"underground" security specialists.  See for yourself what the buzz is about!  
Early-bird registration ends July 3.  This event will sell out. www.blackhat.com
-------------------------------------------------------------------------------