Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



IDS: Re: Tuning false positives

Re: Tuning false positives

From: Joel M Snyder <Joel.Snyder_at_Opus1.COM>
Date: Thu, 29 Dec 2005 09:03:00 -0700

Gary Halleen (ghalleen) <ghalleen_at_cisco.com> wrote:

> Before I catch too many flames, let me clarify that I recommend a good
> SIM product, of which MARS is one.

Hmmm, speaking of flames... not sure that I would necessarily agree that
MARS is even a SIM product at all, depending on your definition of SIM,
but in any case rather than flame in public, I'll pitch out:

http://infosecuritymag.techtarget.com/ss/0,295796,sid6_iss506_art1043,00.html

which is a test I did of five SIMs late last year.

jms

-- 
Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719
Phone: +1 520 324 0494 (voice)  +1 520 324 0495 (FAX)
jms@Opus1.COM    http://www.opus1.com/jms    Opus One
------------------------------------------------------------------------
Test Your IDS
Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
------------------------------------------------------------------------
Received on Jan 02 2006
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos