Re: Protocol Anomaly Detection IDS - Honeypots

Rob Shein wrote:
> I have to agree entirely. A lot of people think of a honeypot as something

imho, i think any defense could be offense and vis versa. too much stigma about this is for this and this is for that. as an intel analyst, i think we should "improvise" ideas and tools for anomaly events. in similar scenerio as rob had mentioned, this was a way for me to gather what i needed to setup a better security perimeter and of course having the attention focused elsewhere does allow the gatekeeper to see which holes they need to focus on.

> twist, like an open port that the others don't have. It doesn't have to be

last time i mentioned about the idea of sun tzu's "art of war" someone flamed me so hard about we can't put idealogy with science or something like that and you get to mentioned the seven samurai!!! but i do have to agree that our job is not about just being scientific but understand the human domain as well...

<snip>

-- 
<>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.0 (GNU/Linux)

iQCUAwUBPhxERRxoVYCzmrKXAQJK5gP3Y7CTsFyKpEz2p5W4GWI9+qSm+kWfdJ0R
xNlma0Ma9rAL/OBJcZMo5IXyXas+3Edogbv4Al6dIf8lot1WS0Iaxxl/cg2f7gf+
otf7LfNpZDE/6OzR7A1qN6baPMLSjGzywwQWMfSVuWWb6kGQxMsA13Kn68G7Ozxs
5CODZqUPyg==
=AolA
-----END PGP SIGNATURE-----



-----------------------------------------------------------
Lose another weekend managing your IDS?
Take back your personal time.
15-day free trial of StillSecure Border Guard.
http://www.securityfocus.com/stillsecure"> 
http://www.securityfocus.com/stillsecure