IDS: Re: IPS Blocking Spyware?

[Darren Rogers Mailing Lists <drlists () gmail com>]

The filters on the box today directly stop the communication *and*
installation of about a dozen core spyware apps, and the commo from
numerous others.  I say directly, because the client (in this case IE)
vulnerability filters (for example the recent IFRAME vuln) already
stop drive-by-downloads of hundreds of other adware/spyware apps by
unwitting and unpatched users.

Darren


On Fri, 3 Dec 2004 09:16:23 -0500, Murtland, Jerry
<murtlandj () grangeinsurance com> wrote:
<snip>
> The better question is how/where does it stop the spyware?  
</snip>

--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from 
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
--------------------------------------------------------------------------