RE: Intrusion Risk Assessment

Robert

The only one I have heard of and that we use with our product is the 4 levels of criticality that snort uses.

alan

Alan Shimel
VP of Sales & Business Development
Latis Networks, Inc.

303-642-4515 Direct
516-857-7409 Mobile
303-642-4501 Fax

www.stillsecure.com
Reducing your risk has never been this easy. . . .
The information transmitted is intended only for the person to which it is addressed and may contain confidential material. Review or other use of this information by persons other than the intended recipient is prohibited. If you've received this in error, please contact the sender and delete from any computer.

-----Original Message-----
From: Robert_Huber@bankone.com [mailto:Robert_Huber@bankone.com] Sent: Monday, January 06, 2003 10:54 AM
To: focus-ids@securityfocus.com
Subject: Intrusion Risk Assessment

Anyone know of any IDS risk assessment matrixes out there? I'm looking for something like the following:

Rating	 			Severity
1  No Damage			a.	Not possible to exploit (or)
				b.	No damage (or)
				c.	Hoax
	 	 	 	 
2 Harassment			a.	Possible damage, unconfirmed

(or)

				b.	Temporarily shuts down services

3 Minor Damage			a.	Short-term impact (or)
				b.	Exploit allows access to view
files (or)
				c.	Minimal effort required to

4 Moderate Damage a. The exploit is easy to perform
(or)

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

                                b. Important systems can be
effected with administrative compromise (or)

                                c. Exploit allows full access to
files (or)

                                d. Long-term effects, significant
effort may be required to recover

5 Heavy Damage		a.	The exploit is easy to perform (and)
				b.	An exploit will cause severe
damage to multiple computers (and/or)
				c.	Requires reinstallation or

Robert Huber
Bank One Information Security
Phone: 302-282-2234
Pager: 888-646-3502