Intrusion Detection

How much should IT disclose post-intrusion?

As SearchSecurity's recent podcast noted, Apache's recent security disclosure was unusual in how thorough it was. Just curious: What's your company's intrusion or malware disclosure policy, and are you happy with how it's implemented?

Defense in depth and unified threat management appliances

Experts tout unified threat management appliances as an ideal antimalware, intrusion prevention and content filtering firewall for midmarket companies. But doesn't this counter the long-standing security practice of defense-in-depth? With a one vendor, platform, and management console, aren't we...

Can an IPS collect information of all layers like like which protocol and port numbers are being used or it can only sniff till layer 3 detail ?

Hi. I have a scenario where an IPS is connected to the switch and is monitoring all the ports of it. I would like to know that whether this device can capture information till layer 3 (network layer) or it can capture full details of all seven layers, like which application, protocol and port is...

Solutions for sniffing?

Hello Guys. Can anybody help me know that how to protect traffic from being sniffed? One solution is encryption, anything else ? Your answers awaited. Cheers. Rahul

Intrusion from 255 network broadcast address

We have about 25 computers on our network. All have F-secure client security installed. Today on several of them I get a pop-up stating that an intrusion attempt has been blocked from the .255 network broadcast address. This is the first time this has occurred. What could be some possible causes...

HIDS

DOES HOST INTRUSION DETECTION SYSTEMS USE HEURISTIC BASED DETECTION WHICH IN TURNS USES A CIPHER KEY TO DETERMINE IF AN ALERT SHOULD BE TRIGGERED?

HIPS

My company currently has a HIPS solution that is end of life. We are researching all of the different products out there. What would be the key things to look for in a solution?

Recommendations for hosted intrusion detection and prevention system vendor?

Hello, I am looking for a 100% outsourced (hosted, managed, etc.) intrusion detection and prevention system vendor for use in the payment card industry. They should be able to demonstrate recognition of and compliance with PCI security parameters. Does anyone have any qualified recommendations...