Intrusion Detection Systems: RE: The CVE (WAS: RE: RE: Ramping up for another review)

[defarre () sandia gov (Farrell, Dave E)]

Archive: http://msgs.securepoint.com/ids
FAQ: http://www.ticm.com/kb/faq/idsfaq.html
IDS: http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
UNSUBSCRIBE: email "unsubscribe ids" to majordomo () uow edu au
 

> > The IDS industry needs a standard for benchmarking the performance
> of IDS.
> > we've been over this before - see Roy Maxion's excellent RAID
> > presentations on IDS measurement and testing requirements for some idea
> of
> > what's actually needed, as opposed to the usual benchmarketing...
> Is this on-line anywhere?  I'd love to read it....
FYI
Roy's presentation "Measuring Intrusion Detection Systems" from RAID98
http://www.zurich.ibm.com/pub/Other/RAID/Prog_RAID98/Program.html
Note that much of this has yet to be addressed even though more has come out
since this and the experiences with the MIT/Lincoln Lab and Air Force
Research Lab IDS evaluations.

Other proceedings from RAID99
http://www.cerias.purdue.edu/raid/proceedings/1999/

Later...Dave