Articles Tagged ‘IPS’

IRC on Non-Standard Ports

August 4th, 2011

Johannes B. Ullrich from SANS wrote about a user that made an interesting find in their network (you can read Johannes note here). In short, the user wrote an IDS signature to look for the NICK and USER commands that signify the start of an IRC session, and lo and behold found IRC traffic on [...]

Intrusion Prevention News and Errata

July 9th, 2010

Security Teams Losing Ground Against Attackers? This week the Ponemon Institute released a study of almost 600 IT security professionals who overwhelmingly reported an increase in advanced threats and a lack of proper security mechanisms to deal with them. A few important notes: ❯ “Advanced Threat” was defined as a threat requiring a methodology or [...]

Who’s the best illusionist?

October 16th, 2009

When asked who’s the best illusionist of all time, you’ll likely hear anything from Harry Houdini to David Copperfield to David Blane, but they don’t have anything on your IPS vendor. I often hear the question, how big or how good is Palo Alto Networks’ vulnerability research team? If you look at the website or [...]