Tagged Questions

-3
votes
1answer
94 views

What's the best IDS for my machine? [closed]

I'm looking for free IDS that sniffs to traffic in real time.. Can anyone help me !
12
votes
5answers
375 views

Neural networks & anomaly detection

Neural networks, with their ability to learn behavioural patterns from arbitrary data, seem like a natural way to deal with intrusion detection. There are many academic papers on the topic which ...
5
votes
2answers
568 views

Snort Sensor Placement

I have a snort sensor monitoring some of my network being fed from a mirrored port. This mirrored session only monitors traffic between the firewall and peering switch. Since this just sees traffic ...
5
votes
3answers
366 views

Best practice for creating an initial IPS policy

I see that most IPS available in the market comes with a basic pre-defined policy which administrators can base on when creating their initial IPS policy. However, these policy may be insufficient and ...
4
votes
3answers
259 views

Information gathering before deploying a Network IPS

I understand that most NIPS these days have either rules or signatures built in to them and perhaps gathering information prior to deployment may help in fine-tuning the rules / signature once the IPS ...