Archive for the ‘MARS’ Category

IDS is here to stay

August 27, 2007

ClockThere is a lot of hype about how IDS is being replaced by IPS but here is an article that believes IDS products will still be in demand 5 years from now while IPS will be mostly part of firewall products
http://searchsecurity.techtarget.com/original
Content/0,289142,sid14_gci1268979,00.html?track=sy160&asrc=RSS_RSS-10_160

[Editor's Note (Valle): Most customers are still wary of putting their ASAs or IDS products in IPS mode. As more network attacks circumvent signature-based defenses, the real value of IDS comes from their ability to do deep packet inspection and report to SIM/SEM devices like MARS which in turn can activate mitigating instructions within the network.]

Pfizer Breach Illustrates Risks of Sharing Files

June 28, 2007

Pfizer lost social security numbers and other personal information on 15,700 of its employees because of one’s person P2P software.
http://www2.csoonline.com/blog_view.html?CID=33004Barcode

[Editor's Note (Valle): Many people don't realize that they can be sharing their whole harddrive when they enable P2P software on their computers.  Cisco MARS is very good at tracking employees that are participating in P2P networks and has default reports that can be easily generated.  CSA could have prevented the files from being copied and shared on a P2P network as well as kept the employee from installing the P2P client in the first place]