Re: IDS is dead, etc

The perfect firewall is a thick chunk of brie with cat-5 cables jammed into it.

The assumption that human beings can design, write, and install software without error is WRONG. Human beings make mistakes. There is zero emperical evidence to support the idea that complex software will ever be free of vulnerabilities. zip. nada. none. zilch.

Proposing that networks can be secured by not using vulnerability free software is tantamount to proposing we pursue perpetual motion machines to solve the environmental problems caused by petroleum use.

Unfortunately, this silly notion has been the mantra of the security industry for so long, that people are starting to believe it. What a shame.

Will somebody please point me to an error free human endeavor?

Joy,
scottwimer

Bennett Todd wrote:
[ SNIP ]
> Understandable. I really shouldn't have included that remark; or

-- 
Scott M. Wimer, CTO                      Cylant
www.cylant.com                           121 Sweet Ave.
v. (208) 883-4892                        Suite 123
c. (208) 301-0370                        Moscow, ID 83843
There is no Security without Control.


---------------------------------------------------------------------------
Captus Networks - Integrated Intrusion Prevention and Traffic Shaping  
 - Instantly Stop DoS/DDoS Attacks, Worms & Port Scans
 - Automatically Control P2P, IM and Spam Traffic
 - Ensure Reliable Performance of Mission Critical Applications
Precisely Define and Implement Network Security and Performance Policies
**FREE Vulnerability Assessment Toolkit - WhitePapers - Live Demo
Visit us at: 
http://www.captusnetworks.com/ads/31.htm
---------------------------------------------------------------------------

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek