Re: IDS detection approaches

"Randal T. Rioux" <[email protected]> Sat, 13 Oct 2007 00:59:08 -0400

Newsgroups	gmane.comp.security.ids
Organization	Procyon Labs
Message-ID	<[email protected]>

Gary Halleen wrote:
<snip>
> 
> Additionally, all Cisco IPS signatures are open.  You are able to view all
> or most fields of signatures, create your own, and modify existing
> signatures.  You do not need to wait for Cisco to release new signatures if
> you have sufficient IDS/IPS skills to write a new signature.  If you can
> write a snort rule, you can write a Cisco IPS signature.

Open? Really? Where can I download them?

Thanks,
Randy

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw 
to learn more.
------------------------------------------------------------------------