Full Disclosure mailing list archives
Re: Is Marty Lying?
From: Valdis.Kletnieks () vt edu
Date: Mon, 22 Sep 2003 21:47:00 -0400
On Mon, 22 Sep 2003 14:13:44 PDT, security snot said:
"Detect intrusions" - if you can set an IDS signature for something, then you shouldn't be vulnerable to it. So the functionality of IDS is to tell you when you've been compromised by six-month old public vulnerabilities that dvdman has finally gotten his hands on an exploit for, that you never bothered to patch for?
No, the functionality of an IDS is to tell you that somebody just pointed the exploit at you and (hopefully) failed to get in. Consider the unexplained theft of valuables from a bank vault. The surveillance camera may not show how they actually got it, but when you're looking for suspects, a good place to start would be those 3 guys who spent a half hour trying to do the lock on the door earlier that night.....
Useless.
Hammers are useless for driving screws. Almost every tool is useless when used by somebody who doesn't understand it.
Attachment:
_bin
Description:
Current thread:
- Please don't feed the troll (was: Re: Is Marty Lying?), (continued)
- Please don't feed the troll (was: Re: Is Marty Lying?) Cael Abal (Sep 23)
- Re: Is Marty Lying? Valdis . Kletnieks (Sep 22)
- Re: Is Marty Lying? daniel uriah clemens (Sep 22)
- Re: Is Marty Lying? Peter Busser (Sep 22)
- Re: Is Marty Lying? Gregory A. Gilliss (Sep 22)
- Re: Is Marty Lying? security snot (Sep 22)
- Re: Is Marty Lying? pdt (Sep 22)
- Re: Is Marty Lying? Florin Andrei (Sep 22)
- Re: Is Marty Lying? Justin (Sep 23)
- Re: Is Marty Lying? Paul Schmehl (Sep 22)
- Re: Is Marty Lying? Valdis . Kletnieks (Sep 22)
- The usefullness of IDSes (Was: Re: Is Marty Lying?) Peter Busser (Sep 23)
- RE: The usefullness of IDSes (Was: Re: Is Marty Lying?) Philippe Bogaerts (Sep 23)
- RE: The usefullness of IDSes (Was: Re: Is Marty Lying?) Cedric Blancher (Sep 23)
- Re: Is Marty Lying? Peter Busser (Sep 22)
- Re: Is Marty Lying? Peter Busser (Sep 22)
- Re: Is Marty Lying? Shawn McMahon (Sep 22)
- Re: Is Marty Lying? Frank Knobbe (Sep 22)