IDS: Re: RE: Cisco CTR

["Anton A. Chuvakin" <anton () chuvakin org>]

> security posture managment.  The SIM providers has no security knowledge
> or "smart engines" to correlate based on substantial security knowledge
> and experience.
Well, this is not true. Some SIM products are much more than mere "log
aggregators" as they contain the above security knowledge in the form of
correlation rules, algorithmic correlation methods, vulnerability->attack
correlation techniques and other neat things.

Best,
-- 
  Anton A. Chuvakin, Ph.D., GCI*
     http://www.chuvakin.org
   http://www.info-secure.org


---------------------------------------------------------------------------
---------------------------------------------------------------------------