Tag: Detection

Community SANS and SEC 503 comes to Berlin! 16-21 May

Posted on by Ismael Valenzuela

I can’t think of any better place to be in May than… Berlin!! So all packet-ninjas looking to improve their TCP/IP and traffic analysis skills are welcome to join us in the first ever Community SANS Berlin for the SECURITY 503: Intrusion Detection In-Depth track.

A full description of the event can be found here:

http://www.sans.org/info/74514

Registration is still open but you have to be quick. It might be also a good idea to drop me an email if you’re planning to be there 😉

See you in Berlin!

Discussion on LinkedIn Group: What is the best IDS system?

Posted on by Ismael Valenzuela

LinkedIn Security Leaders GroupThat was the question recently asked by a fellow security professional on the LinkedIn Security Leaders Group.

I’m not usually very excited about posting on LinkedIn Discussion Groups. On top of that, I don’t even have the time to blog anything on my own site. However, I could not resist to write a comment on that discussion about what the best IDS system is. Not when I read the following comment:

Actually the idea of an IDS system has been obsolete for a few years now. Given the latest events in the security area, there are plenty of traffic anomalies far more advanced than relatively-simple signatures out there to deal with.

The best approach nowadays is the IPS (Intrusion Prevention Systems) which would not only detect and inform IT management of the attack events but will also apply the necessary countermeasures to them. Most important of all, this must happen at wire-speed with ASIC-based systems.

Continue reading “Discussion on LinkedIn Group: What is the best IDS system?” →