Re: IDS: Active Countermeasures

["Kertesz Imre" <kertesz_imre@bah.com>]

FAQ: See http://www.ticm.com/kb/faq/idsfaq.html
IDS: See http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
HELP: Having problems.. Then email questions to ids-owner@uow.edu.au
NOTE: You MUST remove this line from reply messages as it will be filtered.
SPAM: DO NOT send unsolicted mail to this list.
USUB: email "unsubscribe ids" to majordomo@uow.edu.au
---------------------------------------------------------------------------

Depending on what platform you are running, there is quite a variety of
freeware-based deception tools and fishbowl-type applications that not only
deter most of your garden-variety script kiddies, but they give you a much
better opportunity to determine the source of the intrusion and identify the
culprit(s). Not to mention that it is also fun to watch.

Check out the repertoire at Packet Storm Security:

http://www.Genocide2600.com/~tattooman/archives.shtml


Trent wrote:

> Hi All,
>
> Does anyone have suggestions for taking a somewhat more active approach to
> discouraging intruders?
>
> Cheers,
>
> Mike.

___________________________________________
"Failure is not an option. It comes bundled
with your Microsoft product."
-- Ferenc Mantfeld

Imre Kertész
BAH 410.684.6564