Hey folks,

I have a fairly basic question for the group. Does anyone have any well
thought out comparisons of Signature vs. Protocol Decoding ID in terms of
actual real world detection rates? I am familiar with all of the vendor
position papers on this subject and this is *not* what I am looking for.
It seems of late that the comparison is being used heavily as a
competitive differentiator between different NID packages and I am curious
if anyone knows of any non-bias (at least in the commercial sense) work on
the subject?

-al

VP Engineering
SecurityFocus
"Vae Victis"

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]