"What’s Next for Intrusion Detection and Prevention?"

Author: Marcus Ranum. CSO of Tenable Security

The reasons behind Gartner’s “IDS is dead” quip were:
–Too much data
–Too many “false positives”

Never mind the fact that, technically, they were wrong, customers shared that perception…

Click HERE to view the PDF of this presentation.

AirMagnet Allowed Patent for Ability to Detect Counterfeit Wi-Fi Access Points
6/27/07 - AirMagnet Inc. announced the company has received a notice of allowance for a U.S. Patent covering multiple methods of identifying "spoofed" or counterfeit devices in a wireless LAN. CLICK HERE TO READ THIS ARTICLE

New IPS Business Solution
SANTA CLARA, California, Tuesday June 26, 2007

Another Snort in the Making? IntruPro IPS, Free Intrusion Prevention System, Now Available from Intoto

Intoto’s Sathyan Iyengar CEO in a company press release asked network managers looking for an inexpensive way to better secure traffic crossing their networks to check out a free IntruPro IPS software that can be downloaded onto a standard Linux x86 server and plugs in to the network in front of or behind an existing firewall. Intoto says the application is designed to prevent intruders from exploiting existing vulnerabilities on customer networks and computers, the vendor says.

Some industry analysts have observed that if the technology lives up to billings, companies will experience substantial savings and thereby reduce overall security costs. Also, this technology could quickly transform the intrusion prevention landscape just as Snort did some years back.

"To date, high-performing, enterprise-class network security has been out of the reach of many small and midsized enterprises due to cost constraints, yet just because they're small doesn't mean these companies don't have major security concerns," said Sathyan Iyengar, CEO of Intoto, in a company press release.

The IntruPro IPS business solution is based on the signature detection, protocol anomaly and traffic-anomaly technologies. The details of the technologies are described at http://www.intrupro.com/index.php.

Intoto, which licenses its software to makers of such network equipment as routers, switches, gateways and security applications, says the unthrottled application is free for download and use for an unlimited time. Customers wishing to receive signature updates would need to sign up for an annual service subscription, which is $1,000 per year per installation.