IDS experts brawl, create confusion on where intrusion detection is headed.

Re:IDS experts brawl, create confusion on where intrusion de... by kvs on Friday July 23, 2010 @12:17PM (#1541590)

Competition is a good thing. Snort has been the only IDS in the market (I'm aware of Bro) and now there is competition in Suricata. The problem I see is that Suricata folks confusing "improvement" and "innovation." IDS, IMHO, still need innovations.

[ Parent | on HN ]

Re:IDS experts brawl, create confusion on where intrusion de... by tptacek on Friday July 23, 2010 @12:37PM (#1541656)

Say what? What about Cisco's IDS engine, which isn't Snort, and was originally WheelGroup? What about Intrusion's? What about Fortinet's? What about Enterasys' (Dragon)?

Two things happened to "intrusion detection":

* The concept failed, and

* The technology got rolled up into middleboxes as part of "IPS" (IDS plus filters) and "UTM" (all-in-one boxes).

There has been a vibrant "market" of IDS engines for over a decade.

[ Parent | on HN ]

Re:IDS experts brawl, create confusion on where intrusion de... by azim on Friday July 23, 2010 @02:55PM (#1542070)

IPS/IDS is a well over a billion dollar a year industry. The products mentioned in the article don't even make up a measurable fraction of that. Market leaders are products like Cisco, Macfee, ISS, Tipping Point, etc.

[ Parent | on HN ]

Re:IDS experts brawl, create confusion on where intrusion de... by kvs on Friday July 23, 2010 @05:44PM (#1542497)

Should have qualified by sentence with "open source" and "free." OTOH, I don't think IDS is a flawed concept it's just used the wrong way in most enterprises.

[ Parent | on HN ]