Re: Re : Market Segmentation of IDS

[Martin Roesch <roesch () md prestige net>]

Archive: http://msgs.securepoint.com/ids
FAQ: http://www.ticm.com/kb/faq/idsfaq.html
IDS: http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
HELP: Having problems... email questions to ids-owner () uow edu au
NOTE: Remove this section from reply msgs otherwise the msg will bounce.
SPAM: DO NOT send unsolicted mail to this list.
UNSUBSCRIBE: email "unsubscribe ids" to majordomo () uow edu au
-----------------------------------------------------------------------------
> Net Facade - oh no.. Not that again..

Humph.  

> http://www.itsecure.bbn.com/NetFacade.htm

Damn, nice web page for the product.  Remember, this is BBN we're talking
about, the same company that invented the router and decided it'd never sell.

> NetFacade Version 1.2 Apache and IPFilt with about 13 services or so.. :)

Actually 29 if you count the different versions and platform combinations.  I
wrote the service simulators so that it'd be easy to write more/different
services, I don't know if they have and the page hasn't been updated or what. 
It can also simulate the comings and goings of users (for people poking at
finger/ruser services) and various other "self consistency" type things that
you'd expect to see on a UNIX box (services that know about each other, etc). 
It's been a while, but I've heard that the 1.2 system isn't half bad...

> A little bit bigger than NFR BackOfficer.. :)

...and a lot more useful...  ;)

   -Marty


> /m
>
> > and
> >
> > Recourse Mantrap
> > GTE Internetworking NetFacade
> > (Marty Roesch and I were involved in the NetFacade a few years ago)
> >
> > and
> >
> > There are a lot of routers and switches which have 'honeypot' style
> > features. Some of these are available in the Enterasys line of
> > switches, but I am still learning about these features. What I've
> > seen so far has been interesting and will be a very good augmentation
> > to Dragon's view of the world.
> >
> > Ron Gula
> > VP Product
> > Enterasys Networks
> > http://www.enterasys.com
> > http://www.securitywizards.com

-- 
Martin Roesch
roesch () md prestige net
http://www.snort.org