Gentoo Archives: gentoo-dev

From: Daniel <dragonheart@g.o>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] app-forensics category and forensics herd proposal
Date: Sat, 11 Sep 2004 23:29:09
Message-Id: 200409120901.16504.dragonheart@gentoo.org
In Reply to: Re: [gentoo-dev] app-forensics category and forensics herd proposal by Ned Ludd
1 -----BEGIN PGP SIGNED MESSAGE-----
2 Hash: SHA1
3
4
5
6 >
7 > Sorry for the nit pick but this this statement is incorrect.
8 > An IDS does nothing to harden a system. They are not preventive at all.
9
10 Yep - your quite right (as ususal).
11
12 > You can still get compromised just same regardless if you have an IDS in
13 > place or not. They only serve to provide an audit trail. Programs such
14 > as hogwash are an IPS as they make an effort to (re|pro)actively avoid
15 > compromises.
16
17 Sorry Lisa - I do see how IDS and forensics are related now.
18
19 - --
20 Daniel Black <dragonheart@g.o>
21 -----BEGIN PGP SIGNATURE-----
22 Version: GnuPG v1.2.4 (GNU/Linux)
23
24 iD8DBQFBQ4rBhhpKunZncJcRAj11AJ9PbVlhsadrrFfdNmGlZhQ3s/X3CACfUoZ0
25 ZGzgnS7N6hbFXw1VTuYRXlY=
26 =mRoJ
27 -----END PGP SIGNATURE-----
28
29 --
30 gentoo-dev@g.o mailing list

Replies