Re: Hi, I want to study IPS

Greg Martin wrote:
> Some vendors use a baseline of the network and take
> action if the baseline changes drasticly.

Examples ?

> Some use a 'negative
> space' technique which allows only valid traffic and considers all
> other traffic as a dos and drops it completely.

Again, examples ?

IMHO IPS are nothing more than an integration of a firewall and an IDS
concept. As such, they are rather fuzzy and vaporwar-ish enough to be
very marketable.

-- 
Stefano "Raistlin" Zanero
System Administrator Gioco.Net
public PGP key block at http://gioco.net/pgpkeys
---------------------------------------------------------------------------
---------------------------------------------------------------------------