AW: NIDS Testing Information..

["Duffner, Rainer" <rduffner () kpmg com>]

Archive: http://msgs.securepoint.com/ids
FAQ: http://www.ticm.com/kb/faq/idsfaq.html
IDS: http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
HELP: Having problems... email questions to ids-owner () uow edu au
NOTE: Remove this section from reply msgs otherwise the msg will bounce.
SPAM: DO NOT send unsolicted mail to this list.
UNSUBSCRIBE: email "unsubscribe ids" to majordomo () uow edu au
-----------------------------------------------------------------------------
Hi,

I'm doing that too, right now.
Take a look at this test:
http://www.networkcomputing.com/1023/1023f1.html

And this posting:

http://www.shmoo.com/mail/ids/jul99/msg00087.html


After you've read the posting, you can take the Excel-Sheet from there:

http://www2.nwfusion.com/cgi-bin/gate2?nwfusion|intrude/bg.html

and get an idea of what one can look for. And what better to avoid...

I'm compiling such a list right now on my own and it is horrible.
Different vendors like to introduce different buzz-words or features
that may only exist on paper.

If you're seriously into evaluating, you will need to test several ones.
(Which is incidentally what I'm going to do).

Also, take a look at the ids-area on http://www.securityfocus.com
There are links to some good papers.



cheers,
Rainer


                  E-Mail Disclaimer

Der Inhalt dieser E-Mail ist ausschliesslich fuer den bezeichneten
Adressaten bestimmt. Wenn Sie nicht der vorgesehene Adressat dieser 
E-Mail oder dessen Vertreter sein sollten, so beachten Sie bitte, dass
jede Form der Kenntnisnahme, Veroeffentlichung, Vervielfaeltigung oder
Weitergabe des Inhalts dieser E-Mail unzulaessig ist. Wir bitten Sie,
sich in diesem Fall mit dem Absender der E-Mail in Verbindung zu
setzen. Aussagen gegenueber dem Adressaten unterliegen den Regelungen
des zugrundeliegenden Angebotes bzw. Auftrags, insbesondere den 
Allgemeinen Auftragsbedingungen und der individuellen Haftungs-
vereinbarung. Der Inhalt der E-Mail ist nur rechtsverbindlich, wenn er
unsererseits durch einen Brief entsprechend bestaetigt wird. Die
Versendung von E-Mails an uns hat keine fristwahrende Wirkung. Wir 
moechten Sie ausserdem darauf hinweisen, dass die Kommunikation per
E-Mail ueber das Internet unsicher ist, da fuer unberechtigte Dritte
grundsaetzlich die Moeglichkeit der Kenntnisnahme und Manipulation
besteht. Wir werden daher keine vertraulichen Daten unverschluesselt
per E-Mail ueber das Internet versenden.

The information contained in this email is intended solely for the
addressee. Access to this email by anyone else is unauthorized. If you
are not the intended recipient, any form of disclosure, reproduction,
distribution or any action taken or refrained from in reliance on it,
is prohibited and may be unlawful. Please notify the sender
immediately. All statements of opinion or advice directed via this
email to our clients are subject to the terms and conditions expressed
in the governing KPMG client engagement letter. The content of this
email is not legally binding unless confirmed by letter. The sending
of emails to us will not constitute compliance with any time limits or
deadlines. We also like to inform you that communication via email
over the internet is insecure because third parties may have the
possibility to access and manipulate emails. For this reason we will
not send any confidential information via email over the internet,
unless encrypted.