Computerworld
Home News Blogs In Depth ReviewsWhite Papers Newsletters IT Careers

resource center


Ads by TechWords

See your link here

Newsletter Sign-Up

Receive the latest technology news and information.
Security
Computerworld Daily News (First Look and Wrap-Up)
Computerworld Blogs Newsletter
The Weekly Top 10
Cloud Computing
View all newsletters




Privacy Policy
 

An Ounce Of Intrusion Prevention

By Steve Ulfelder
July 9, 2001 12:00 PM ET
Recommended
(2)
Digg
Share/Email

Computerworld - Host-based IDSs tend to rely on signatures—the code-string fingerprints of a known attack—to trigger alerts. The trouble is, hackers create new attacks every day. If they attack an organization using a technique that's not in the database of the IDS, the company is vulnerable. In response, vendors are offering products that look for suspicious activity and proactively block those potential attacks. Here's a sampling of offerings:


    Entercept Security Technologies

    San Jose

    (www.entercept.com)

    Entercept Security Technologies' Entercept 2.0 consists of a software agent that resides near the host's operating system kernel. It monitors system calls before they reach the kernel, uses a rules engine to identify potentially suspicious activity and then either halts the activity or notifies the administrator.


    Recourse Technologies Inc.

    Redwood City, Calif.

    (www.recourse.com)

    Recourse Technologies Inc. offers ManHunt, which performs the duties of a traditional IDS and uses an approach similar to Entercept's to identify new attacks.


    The drawback: Some legitimate activities in an organization may trip these systems. The staff will then need to define exceptions. Otherwise, the organization could wind up suffering too many false positives.


    "These things are good for big hosting facilities, telcos and maybe financial [services firms]," says Hurwitz Group analyst Peter Lindstrom, because security is so vital to such organizations and attacks are so common.


Special Report

Security Risk and Reward
Stories in this report:


Recommend Digg Twitter ShareThis
Email Print Send Feedback Reprints
Jump to comments

Additional Resources

WHITE PAPER
Do You Know the 7 Steps to Successful Data Migration?
Approximately 60 percent of data migration projects overrun time or budget, while some fail completely. Download this white paper, "Enhancing Your Chance for Successful Data Migration," to learn the critical steps you need to take to execute a data migration project with minimum cost and risk to your business.
WHITE PAPER
Total Cost of Ownership of Server Computing Vs. PCs
Read the Gartner research note to learn why the TCO of a server-based computing deployment used to deliver all applications to users is around 50% lower than that of an unmanaged desktop deployment.
WHITE PAPER
IDC White Paper: Linux in a Global Recession
Economic downturns have a tendency to accelerate emerging technologies, boost the adoption of effective solutions, and punish solutions that are not cost competitive or that are out of synch with industry trends. This IDC White Paper presents the results of an IDC survey of 330 companies in Western Europe, Asia/Pacific and the Americas that measures the receptiveness to Linux and takes into consideration changing views driven by the disruptive economic environment that businesses face today.

White Papers & Webcasts

Share our Strength
Download Now  

Lower the Cost and Complexity of a Mobile Workforce through Automation
Download This Resource Now!

Top 10 Things to Know about Data Protection
Download Now  

Managing Mobility: Improve Data Security, Compliance and Manageability
Download This Resource Now!

Top 10 Actions a CIO Can Take to Prepare for a Hurricane
Download Now  

Managing Secure File Transfer to Save Time, Money and IT Resources
Learn how companies are using innovative technology to overcome these challenges and improve user productivity by offloading e-mail attachments and replacing FTP with...

Ponemon Study: The Business Risk of a Lost Laptop
Download Now  

Security Convergence Equals Network Security Cost Savings
Listen to IBM Internet Security Systems' take on network security convergence.

Airport Insecurity: The Case of Lost Laptops
Download Now  

Disaster Recovery 2008: Reduced Costs and Improved Performance
How long can your Enterprise afford to be without your data? With an accelerated disaster recovery program, you never have to answer this...

All White Papers | All Webcasts

Computerworld Reports

8 Questions To Ask About Your Intrusion-Security Solution

Computerworld Technology Briefings IT Service Management

Computerworld Briefing - Analytics: The Art and Science of Better

All Computerworld Reports
 
About Us Advertise Contacts Editorial Calendar Help Desk Jobs at IDG Privacy Policy Reprints Site Map
CIO Computerworld CSO DEMO GamePro Games.net IDC IDG IDG Connect IDG Knowledge Hub IDG TechNetwork IDG Ventures
IDG.net InfoWorld ITwhitepapers ITworld JavaWorld LinuxWorld Macworld Network World PC World The Industry Standard
Copyright © 1994 - 2009 Computerworld Inc. All rights reserved. Reproduction in whole or in part in any form or medium without express written permission of
Computerworld Inc. is prohibited. Computerworld and Computerworld.com and the respective logos are trademarks of International Data Group Inc.