Re: Comparison of several IDS

[deb () zurich ibm com (Herve DEBAR)]

Vin McLellan wrote:
>         Alexey Lukatsky <lukich () rocketmail com> noted the existance of a
> June 1999 Los Alamos Lab report which bravely sought to compare 17 intrusion
> detection systems.   (The LANL research was reportedly "undertaken at the
> instigation and with the support of the Global Security Analysis Laboratory
> at IBM's Zurich Research Laboratory in Rueschlikon, Switzerland.")

FYI, this document was written during Kathleen Jackson's sabbatical year in
Zurich, and we had (and still have) a few of the products installed in our
lab. So it's more than just "reportedly". The URL has already been posted,
the document is at http://lib-www.lanl.gov/la-pubs/00416750.pdf, and there
should be an online interactive version soon, that allows you to compare
IDSes according to a set of criteria weighted according to your
requirements.

Herve