Penetration Testing mailing list archives

Re: [PEN-TEST] Recourse Technologies -- info wanted


From: Mark Teicher <mark.teicher () NETWORKICE COM>
Date: Tue, 3 Oct 2000 08:42:45 -0700

I would like to see them prove the following statement: "With
100 percent data capture at volumes exceeding 1 Gbps"..  Since only a few
IDS vendors are capable of capturing data at volumes of 1 Gbps

/mark


At 11:08 PM 10/2/00 -0400, subscribe wrote:
ManTrap and ManHunt:

coded in C++ and Java...the usual JAVA for the GUI viewing....

what else?
 >> oh, has 'typical' signatures coded in software, BUT also has 'anomaly'
based signatures as well...not pure 'anomaly', but it has been coded in a
way that it attempts to take a known signature, tweak it a bit (for
example, slow the packets down, etc.), and treat that as a threat as well.
In layman's terms, it knows what all IDS know, and a step beyond it
attempts to pre-empt new attacks which are based on old ones via these
anomaly signatures.

c.t.




> Hello:
>
> Has anybody dealt with or know about Recourse Technologies
> (www.recoursetechnologies.com) and its products?  Any info is appreciated.
> Thanks,
> -andrew
>
>
>


Current thread: