IDS mailing list archives
Re: IDS\IPS that can handle one Gig
From: Terry Vernon <tvernon24 () comcast net>
Date: Tue, 07 Jun 2005 13:15:50 +0000
The term vulnerability management is equally flawed. We should not at all "manage" vulnerabilities, but "identify" and "eradicate" them In this context "manage" is used to encapsulate identification, removal, or circumventing based on what option there is at the time of discovery. Terry Vernon Frank Knobbe wrote:
On Sun, 2005-06-05 at 03:39 -0400, Vikram Phatak wrote:The biggest knock I've heard about VM is that it doesn't actually "protect" anything since it is not patching vulnerablities.I think this single line shows the biggest problem in the security industry, the need to protect vulnerabilities. Instead of adding layers to protect the bag of vulnerabilities, we should open the bag and removethe vulnerabilities one by one.The term vulnerability management is equally flawed. We should not at all "manage" vulnerabilities, but "identify" and "eradicate" them. The whole notion of keeping vulnerabilities around is just flawed... ... and I wonder if IPSes just foster the complacency to accept and live with vulnerabilities... Cheers, Frank
-------------------------------------------------------------------------- Test Your IDS Is your IDS deployed correctly?Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more.
--------------------------------------------------------------------------
Current thread:
- RE: IDS\IPS that can handle one Gig Andrew Plato (Jun 01)
- RE: IDS\IPS that can handle one Gig Peter Schawacker (Jun 01)
- Re: IDS\IPS that can handle one Gig Vikram Phatak (Jun 06)
- Re: IDS\IPS that can handle one Gig Frank Knobbe (Jun 07)
- Re: IDS\IPS that can handle one Gig Control Zed (Jun 07)
- Re: IDS\IPS that can handle one Gig Frank Knobbe (Jun 08)
- Re: IDS\IPS that can handle one Gig Terry Vernon (Jun 08)
- Re: IDS\IPS that can handle one Gig Vikram Phatak (Jun 06)
- RE: IDS\IPS that can handle one Gig Peter Schawacker (Jun 01)
- <Possible follow-ups>
- RE: IDS\IPS that can handle one Gig Palmer, Paul (ISSAtlanta) (Jun 01)
- Re: IDS\IPS that can handle one Gig Ed Gibbs (Jun 04)
- Re: IDS\IPS that can handle one Gig Bob Walder (Jun 04)
- Re: IDS\IPS that can handle one Gig Bob Walder (Jun 05)
- Re: IDS\IPS that can handle one Gig Per Engelbrecht (Jun 01)
- RE: IDS\IPS that can handle one Gig Prashant Khandelwal (Jun 01)
- RE: IDS\IPS that can handle one Gig THolman (Jun 01)
- Re: IDS\IPS that can handle one Gig Peter Schawacker (Jun 01)
- RE: IDS\IPS that can handle one Gig Dave Hawkins (Jun 01)