343 messages sorted by: [ date ] [ thread ] [ subject ]

Starting: Thu Jan 02 2003 - 10:53:20 CST
Ending: Mon Mar 31 2003 - 11:30:09 CST

• Aaron Turner
  • Re: Gig TAPs (Fri Jan 31 2003 - 13:21:15 CST)
• Abe L. Getchell
  • RE: Active response... some thoughts. (Thu Feb 06 2003 - 09:55:42 CST)
  • RE: Active response... some thoughts. (Fri Jan 24 2003 - 00:17:04 CST)
  • RE: Active response... some thoughts. (Tue Jan 21 2003 - 13:02:50 CST)
  • Active response... some thoughts. (Thu Jan 16 2003 - 12:37:11 CST)
• Adam Powers
  • RE: Protocol Anomaly Detection IDS - Honeypots (Thu Feb 20 2003 - 17:28:43 CST)
  • RE: Protocol Anomaly Detection IDS (Thu Feb 06 2003 - 10:14:23 CST)
• Aditya
  • RE: IDS Stealth Mode (Fri Jan 10 2003 - 01:00:34 CST)
• Alan Shimel
  • RE: False Positives with IntruVert (Sat Mar 29 2003 - 10:52:57 CST)
  • RE: Active response... some thoughts. (Sun Jan 26 2003 - 22:45:14 CST)
  • RE: IDS Common Criteria (Mon Jan 06 2003 - 14:53:28 CST)
  • RE: Intrusion Risk Assessment (Mon Jan 06 2003 - 14:58:20 CST)
• Alfred Huger
  • Summary of the responses (4 line ad) (Thu Feb 13 2003 - 15:48:43 CST)
  • 4 line ads on posts (Wed Feb 12 2003 - 18:46:08 CST)
• Ali Saifullah Khan
  • Re: Active response... some thoughts. (Mon Feb 03 2003 - 13:18:15 CST)
• anderson lee
  • hel (Wed Jan 08 2003 - 20:45:07 CST)
• andre
  • Re: Active response... some thoughts. (Sat Feb 08 2003 - 15:50:21 CST)
• Andrew Plato
  • RE: Protocol Anomaly Detection IDS (Fri Feb 07 2003 - 20:07:54 CST)
  • SQLSlammer Worm & IDSs (Tue Jan 28 2003 - 16:49:21 CST)
• Angel Rivera
  • RE: sniffer detection on switched based networks (Thu Feb 06 2003 - 08:26:58 CST)
• Anton Chuvakin
  • Re: slow scans? (Wed Feb 12 2003 - 15:38:01 CST)
  • Re: slow scans? (Wed Feb 12 2003 - 14:29:51 CST)
  • slow scans? (Wed Feb 12 2003 - 12:46:41 CST)
• Augusto Paes de Barros
  • RES: Protocol Anomaly Detection IDS - Honeypots (Fri Feb 21 2003 - 15:56:26 CST)
  • RES: Protocol Anomaly Detection IDS - Honeypots (Fri Feb 21 2003 - 15:53:33 CST)
  • RE: RES: Protocol Anomaly Detection IDS - Honeypots (Fri Feb 21 2003 - 09:27:09 CST)
  • RES: Protocol Anomaly Detection IDS - Honeypots (Fri Feb 21 2003 - 05:17:46 CST)
• Avi Chesla
  • RE: Voice over IP applications vulnerabilites/attacks ? (Tue Jan 14 2003 - 07:00:55 CST)
  • Voice over IP applications vulnerabilites/attacks ? (Thu Jan 02 2003 - 11:14:16 CST)
• Bandar Alzaaidi
  • Re: Did IDSes detect the SQL worm? (Thu Jan 30 2003 - 14:27:13 CST)
• Bawcom, Aaron
  • RE: Gig TAPs (Mon Feb 03 2003 - 12:07:36 CST)
  • RE: new on IDSs (Mon Jan 27 2003 - 10:23:49 CST)
• Bennett Todd
  • Re: Snort RPC Vulnerability (Mon Mar 03 2003 - 13:15:41 CST)
  • Re: Snort RPC Vulnerability (Mon Mar 03 2003 - 13:15:41 CST)
  • Re: Snort RPC Vulnerability (Mon Mar 03 2003 - 13:15:41 CST)
  • Re: Gig TAPs (Mon Feb 03 2003 - 13:46:52 CST)
• Bill Boyle
  • RE: False Positives with IntruVert (Fri Mar 28 2003 - 14:18:06 CST)
• Bill Martin
  • RE: WINDUMP SYNTAX ASSISTANCE..... (Wed Jan 29 2003 - 01:09:52 CST)
• Bob Radvanovsky
  • Re: Protocol Anomaly Detection IDS - Honeypots (Thu Feb 20 2003 - 13:49:00 CST)
• bobr_at_guru.virtual.sk
  • how to detect http tunnel? (Mon Feb 03 2003 - 07:43:00 CST)
• Brennen Reynolds
  • Traffic logs to help with IDS testing and development (Mon Feb 10 2003 - 19:17:32 CST)
  • RE: Voice over IP applications vulnerabilites/attacks ? (Fri Jan 03 2003 - 17:37:42 CST)
• Brett Harris
  • Re: sniffer detection on switched based networks (Wed Feb 05 2003 - 19:00:23 CST)
• Brian Hernacki
  • Re: Anamoly based network IDS (Fri Mar 28 2003 - 17:18:07 CST)
• Brian Laing
  • RE: Active response... some thoughts. (Fri Jan 31 2003 - 13:56:17 CST)
  • RE: Active response... some thoughts. (Wed Jan 29 2003 - 12:12:15 CST)
  • RE: Intrusion Prevention (Tue Jan 14 2003 - 13:48:44 CST)
• Brito, Nelson (ISS Brazil)
  • RE: IDS Stealth Mode (Thu Jan 09 2003 - 07:00:59 CST)
• Cathleen_M_Brackin_at_bankone.com
  • RE: Did IDSes detect the SQL worm? (Wed Jan 29 2003 - 12:04:52 CST)
• Chmielarski TOM-ATC090
  • RE: Did IDSes detect the SQL worm? (Fri Jan 31 2003 - 15:04:14 CST)
• Chris Tobkin
  • Re: Voice over IP applications vulnerabilities/attacks? (Thu Jan 02 2003 - 18:33:42 CST)
• Chris Travers
  • Re: Active response... some thoughts. (Wed Feb 05 2003 - 01:16:08 CST)
  • Re: Active response... some thoughts. (Fri Jan 31 2003 - 12:22:58 CST)
• Christian Kreibich
  • Re: ids detect malicious encrypted data? (Fri Feb 21 2003 - 11:29:56 CST)
• Christopher Lyon
  • RE: Active response... some thoughts. (Sun Jan 26 2003 - 02:58:10 CST)
• Citadel Consulting
  • RE: WLAN IDS (Thu Feb 20 2003 - 14:46:11 CST)
  • RE: WLAN IDS (Thu Feb 20 2003 - 13:58:23 CST)
• Cox, Michael
  • IDS Deployment Metrics (Fri Feb 14 2003 - 11:59:32 CST)
  • UTF-16 and premature request ending evasion (Tue Jan 28 2003 - 09:25:23 CST)
• Cure, Samuel J
  • False Positives with IntruVert (Fri Mar 28 2003 - 11:36:23 CST)
• Dan Hanson
  • [Snort-users] Snort 2.0 rc1 available (fwd) (Wed Mar 26 2003 - 17:35:13 CST)
• Darren Bounds
  • Packit 0.5.0 Released! (Mon Mar 10 2003 - 20:58:45 CST)
• Dave Mitchell
  • Re: IDS Stealth Mode (Thu Jan 09 2003 - 09:30:58 CST)
• David J. Meltzer
  • RE: VDS FAQ - request for feedback (Fri Jan 31 2003 - 10:43:30 CST)
  • VDS FAQ - request for feedback (Mon Jan 27 2003 - 18:27:30 CST)
  • RE: how to verify whether an attack attempt is successful? (Fri Jan 17 2003 - 11:08:56 CST)
  • RE: VA/IDS Integration (Was: RE: re[2]: Intrusion Risk Assessment) (Fri Jan 10 2003 - 09:53:55 CST)
• David Vertie
  • Working with/Setting up IDS (Papers) (Mon Mar 24 2003 - 02:05:48 CST)
  • RE: about mirroring port (Thu Mar 20 2003 - 23:47:20 CST)
• David W. Goodrum
  • Re: VDS FAQ - request for feedback (Wed Jan 29 2003 - 16:52:21 CST)
  • Re: new on IDSs (Mon Jan 27 2003 - 12:33:42 CST)
• Dejan Markovic
  • Re: about mirroring port (Mon Mar 24 2003 - 09:21:53 CST)
• Dener Martins
  • Re: Triangulating packets (Wed Feb 12 2003 - 11:38:06 CST)
• detmar.liesen_at_lds.nrw.de
  • AW: Active response... some thoughts. (Tue Jan 21 2003 - 01:17:06 CST)
  • interface-mirroring on a server (Fri Jan 10 2003 - 02:39:28 CST)
  • RE: how to verify whether an attack attempt is successful? (Thu Jan 16 2003 - 01:28:25 CST)
  • AW: [IDS] IDS Common Criteria (Wed Jan 08 2003 - 02:11:42 CST)
• Disco Godfather
  • RE: [IDS] IDS Common Criteria (Tue Jan 21 2003 - 06:14:53 CST)
• dreamwvr_at_dreamwvr.com
  • Re: RES: Protocol Anomaly Detection IDS - Honeypots (Fri Feb 21 2003 - 11:42:23 CST)
  • Re: Protocol Anomaly Detection IDS - Honeypots (Fri Feb 21 2003 - 00:56:56 CST)
  • Re: Protocol Anomaly Detection IDS - Honeypots (Thu Feb 20 2003 - 13:38:29 CST)
• Fengmin Gong
  • RE: Intrusion Risk Assessment (Sat Jan 18 2003 - 16:16:04 CST)
  • RE: Intrusion Risk Assessment (Tue Jan 14 2003 - 13:02:36 CST)
• Fernando Cardoso
  • Re: Intrusion Risk Assessment (Tue Jan 07 2003 - 03:58:19 CST)
• Foster, Douglas
  • RE: [IDS] IDS Common Criteria (Fri Jan 17 2003 - 21:21:21 CST)
• fr0ck9
  • Re: Active response... some thoughts. (Wed Feb 05 2003 - 16:42:14 CST)
  • Re: tcp overlap (Mon Jan 13 2003 - 13:16:31 CST)
• Frank Knobbe
  • Re: RES: Protocol Anomaly Detection IDS - Honeypots (Fri Feb 21 2003 - 18:33:17 CST)
  • Re: RES: Protocol Anomaly Detection IDS - Honeypots (Sat Feb 22 2003 - 14:55:39 CST)
  • Re: Web server response to attacks (Fri Feb 21 2003 - 18:17:56 CST)
  • Re: Protocol Anomaly Detection IDS (Tue Feb 11 2003 - 14:17:17 CST)
  • Re: Active response... some thoughts. (Sat Feb 08 2003 - 18:32:13 CST)
  • RE: Active response... some thoughts. (Wed Jan 29 2003 - 11:08:35 CST)
  • Re: IDS Stealth Mode (Tue Jan 14 2003 - 22:43:31 CST)
• Frederick M Avolio
  • Re: [IDS] IDS Common Criteria (Tue Jan 07 2003 - 15:04:21 CST)
  • Re: [IDS] IDS Common Criteria (Tue Jan 07 2003 - 08:15:13 CST)
• Garbrecht, Frederick
  • RE: Active response... some thoughts. (Tue Jan 28 2003 - 10:31:18 CST)
• Garritano,Robert
  • RE: Did IDSes detect the SQL worm? (Fri Jan 31 2003 - 10:04:09 CST)
  • Gig TAPs (Wed Jan 29 2003 - 11:38:33 CST)
• Gene Yoo
  • Re: Protocol Anomaly Detection IDS - Honeypots (Fri Feb 21 2003 - 23:05:37 CST)
• Geoff Craig
  • RE: [Snort-2003-001] Buffer overflow in Snort RPC preprocessor (Mon Mar 03 2003 - 23:12:52 CST)
• George Capehart
  • Re: OSEC [WAS: Re: Intrusion Prevention] (Sat Jan 04 2003 - 12:48:25 CST)
• Gianni Tedesco
  • Re: SQL effect on stateful IDS and firewalls (Wed Jan 29 2003 - 11:33:03 CST)
• Golomb, Gary
  • 30-ish page whitepaper (Wed Feb 26 2003 - 14:19:55 CST)
  • IDS Assessment (was: Intrusion Prevention... probably something else at one point) (Wed Jan 08 2003 - 23:01:14 CST)
  • RE: Intrusion Prevention (Mon Jan 06 2003 - 15:07:44 CST)
• Gonzalez, Albert
  • RE: Active response... some thoughts. (Mon Feb 03 2003 - 12:50:41 CST)
  • RE: snort-inline inbound ruleset? (Mon Feb 03 2003 - 12:38:17 CST)
  • RE: Did IDSes detect the SQL worm? (Wed Jan 29 2003 - 13:15:14 CST)
• Graham Field
  • RE: Intrusion Prevention (Wed Jan 08 2003 - 19:50:40 CST)
• Graham, Robert (ISS Atlanta)
  • RE: Anamoly based network IDS (Fri Mar 28 2003 - 01:36:55 CST)
  • RE: Protocol Anomaly Detection IDS (Wed Feb 05 2003 - 18:14:25 CST)
  • RE: [IDS] IDS Common Criteria (Wed Jan 15 2003 - 13:03:29 CST)
  • RE: [IDS] IDS Common Criteria (Fri Jan 17 2003 - 12:37:07 CST)
  • RE: [IDS] IDS Common Criteria (Fri Jan 10 2003 - 18:14:53 CST)
• Greenspan, Howard
  • RE: IDS Common Criteria (Tue Jan 07 2003 - 10:25:16 CST)
• Greg Shipley
  • Testing Manifestos [WAS: OSEC, ICSA, Cats and Dogs, etc.] (Fri Jan 10 2003 - 00:39:55 CST)
• Greg van der Gaast
  • RE: [IDS] IDS Common Criteria (Wed Jan 08 2003 - 08:14:40 CST)
  • RE: IDS Common Criteria (Tue Jan 07 2003 - 02:19:40 CST)
• Hall, Andrew (DPRS)
  • RE: [Snort-sigs] new Q signature (Mon Feb 10 2003 - 15:17:14 CST)
• Herve Debar
  • Re: Intrusion Risk Assessment (Tue Jan 07 2003 - 07:01:19 CST)
• Huagang XIE
  • Re: how to verify whether an attack attempt is successful? (Wed Jan 15 2003 - 18:45:32 CST)
• Ivan Hernandez
  • Re: ids detect malicious encrypted data? (Fri Feb 28 2003 - 11:54:45 CST)
• Jacco Tunnissen
  • Share your Honeypot and IDS experiences with the masses (Fri Feb 28 2003 - 22:14:46 CST)
• Jack Whitsitt (jofny)
  • Using an IDS to redirect hostile traffic to a Honeypot (Sat Feb 22 2003 - 20:18:26 CST)
• James Hoagland
  • Re: slow scans? (Fri Feb 14 2003 - 11:42:35 CST)
  • Re: slow scans? (Fri Feb 14 2003 - 11:42:19 CST)
• Jason
  • Re: [Snort-sigs] new Q signature (Mon Feb 10 2003 - 16:50:01 CST)
• Jason Beauford
  • WINDUMP SYNTAX ASSISTANCE..... (Tue Jan 28 2003 - 11:27:26 CST)
• jason cheng
  • some questions! ('binary' encoding is not supported, stored as-is) (Sat Mar 01 2003 - 06:10:12 CST)
• Jason Falciola
  • Re: IDS security testing training (Wed Jan 29 2003 - 13:55:21 CST)
• Jason V. Miller
  • New SecurityFocus Focus-IDS Article (Thu Mar 13 2003 - 19:35:52 CST)
  • New SecurityFocus Focus-IDS Article (Mon Mar 03 2003 - 14:05:27 CST)
  • Snort RPC Vulnerability (Mon Mar 03 2003 - 12:20:51 CST)
  • Re: Snort RPC Vulnerability (Mon Mar 03 2003 - 13:06:01 CST)
  • Re: Snort RPC Vulnerability (Mon Mar 03 2003 - 13:06:01 CST)
  • Focus-IDS Mailing List Administration & Article Announcement (Thu Feb 20 2003 - 14:57:30 CST)
• JC
  • commercial IPS (Mon Mar 24 2003 - 10:54:48 CST)
• Jeff Dell
  • IDS Policy Manager 1.3 Final Released! (Fri Feb 14 2003 - 09:19:12 CST)
• Jim McMurry
  • Re: Gig TAPs (Thu Jan 30 2003 - 13:27:22 CST)
• Joe Magee
  • Re: about mirroring port (Thu Mar 20 2003 - 01:36:18 CST)
  • WebDAV Vulnerability URL's (Tue Mar 18 2003 - 10:08:42 CST)
• Johannes Ullrich
  • Re: slow scans? (Wed Feb 12 2003 - 13:15:21 CST)
• John Flynn
  • snort-inline inbound ruleset? (Sun Feb 02 2003 - 12:09:20 CST)
• Jon
  • Re: [Snort-sigs] new Q signature (Thu Feb 27 2003 - 22:08:01 CST)
  • Re: [Snort-sigs] new Q signature (Mon Feb 10 2003 - 19:02:05 CST)
  • Re: [Snort-sigs] new Q signature (Mon Feb 10 2003 - 15:43:08 CST)
  • new Q signature (Mon Feb 10 2003 - 13:53:11 CST)
• Jon Gary
  • Re: tcp overlap (Wed Jan 15 2003 - 14:46:49 CST)
• Jonas Eriksson
  • Re: IDS Stealth Mode (Sun Jan 12 2003 - 12:40:38 CST)
• Jordan K Wiens
  • RE: Protocol Anomaly Detection IDS - Honeypots (Fri Feb 21 2003 - 15:36:26 CST)
  • RE: Protocol Anomaly Detection IDS - Honeypots (Fri Feb 21 2003 - 14:12:36 CST)
  • Re: Protocol Anomaly Detection IDS (Thu Feb 06 2003 - 12:23:06 CST)
  • Re: NetScreen IDS (X-post) (Tue Jan 28 2003 - 10:23:57 CST)
  • Re: NetScreen IDS (X-post) (Mon Jan 27 2003 - 13:21:44 CST)
• Jose Nazario
  • Re: how to verify whether an attack attempt is successful? (Wed Jan 15 2003 - 12:51:39 CST)
• Joseph M Hoffman
  • RE: IDS Common Criteria (Tue Jan 07 2003 - 14:12:27 CST)
• Joshua Haines
  • Call For Papers -- RAID 2003 (Tue Jan 14 2003 - 16:13:39 CST)
• Joshua Krage
  • Re: IDS Stealth Mode (Mon Jan 13 2003 - 21:15:42 CST)
• Karel Chwistek
  • Re: about mirroring port (Thu Mar 20 2003 - 02:28:25 CST)
• Keith Stewart
  • RE: Voice over IP applications vulnerabilites/attacks ? (Thu Jan 02 2003 - 16:03:58 CST)
• Ken Smith
  • RE: Snort-Inline and worm containment (Fri Jan 31 2003 - 10:46:41 CST)
• Kistler Ueli
  • Eagle X 1.0 release (Tue Feb 04 2003 - 17:45:41 CST)
  • IDScenter 1.1 rc1 released (Tue Feb 04 2003 - 17:44:17 CST)
• kitkat
  • misuse detector (Sat Mar 22 2003 - 11:41:02 CST)
• Kohlenberg, Toby
  • RE: Active response... some thoughts. (Tue Jan 28 2003 - 11:55:37 CST)
  • RE: Active response... some thoughts. (Mon Jan 27 2003 - 19:26:59 CST)
  • RE: Active response... some thoughts. (Thu Jan 23 2003 - 19:45:07 CST)
• Konrad Rieck
  • Re: 30-ish page whitepaper (Thu Feb 27 2003 - 12:37:37 CST)
  • Costs of a compromise related to the detection time (Mon Feb 03 2003 - 08:35:17 CST)
• Kurt Seifried
  • Re: how to detect http tunnel? (Mon Feb 03 2003 - 19:44:31 CST)
  • Re: Did IDSes detect the SQL worm? (Thu Jan 30 2003 - 15:06:51 CST)
  • Re: how to verify whether an attack attempt is successful? (Wed Jan 15 2003 - 15:27:19 CST)
  • Re: IDS Stealth Mode (Wed Jan 08 2003 - 19:09:17 CST)
• kyle.r.maxwell_at_verizon.com
  • Re: SQLSlammer Worm & IDSs (Wed Jan 29 2003 - 13:09:36 CST)
• Lance Spitzner
  • Re: Anamoly based network IDS (Thu Mar 27 2003 - 09:48:53 CST)
  • Re: RES: Protocol Anomaly Detection IDS - Honeypots (Sun Feb 23 2003 - 13:24:20 CST)
  • Re: RES: Protocol Anomaly Detection IDS - Honeypots (Fri Feb 21 2003 - 10:36:56 CST)
  • Re: Protocol Anomaly Detection IDS - Honeypots (Thu Feb 20 2003 - 12:58:58 CST)
  • Re: snort-inline inbound ruleset? (Mon Feb 03 2003 - 11:41:37 CST)
  • Re: Snort-Inline and worm containment (Wed Jan 29 2003 - 17:21:33 CST)
  • Know Your Enemy: Learning with VMware (Mon Jan 27 2003 - 11:40:51 CST)
  • Linux Snort-Inline Toolkit (Wed Jan 08 2003 - 11:02:32 CST)
  • Linux Honeyd Toolkit (Tue Jan 07 2003 - 08:40:16 CST)
• Lau Ker Chea
  • anomaly-based network IDS (Tue Mar 25 2003 - 22:08:32 CST)
  • ids detect malicious encrypted data? (Fri Feb 21 2003 - 03:21:04 CST)
• Lawrence, Gabriel
  • OWASP Announces Beta 1 of CodeSeeker Web Application Firewall (Thu Mar 13 2003 - 11:47:03 CST)
• Levinson, Karl
  • RE: Web server response to attacks (Fri Feb 21 2003 - 12:17:57 CST)
• lucy lee
  • Re: backdoor detection (Sat Jan 11 2003 - 20:12:20 CST)
• M. Dodge Mumford
  • Re: IDS Stealth Mode (Wed Jan 08 2003 - 19:39:48 CST)
• Maher Odeh
  • RE: how to verify whether an attack attempt is successful? (Wed Jan 15 2003 - 16:05:42 CST)
• Marc Benoit
  • Re: RES: Protocol Anomaly Detection IDS - Honeypots (Fri Feb 21 2003 - 17:30:59 CST)
• Marcus J. Ranum
  • Re: OSEC [WAS: Re: Intrusion Prevention] (Mon Dec 30 2002 - 22:34:13 CST)
• Martin Roesch
  • Re: [Snort-2003-001] Buffer overflow in Snort RPC preprocessor (Tue Mar 04 2003 - 14:29:26 CST)
  • Re: [Snort-2003-001] Buffer overflow in Snort RPC preprocessor (Tue Mar 04 2003 - 14:58:41 CST)
  • NOTE: [Snort-2003-001] Buffer overflow in Snort RPC preprocessor (Mon Mar 03 2003 - 18:22:10 CST)
  • [Snort-2003-001] Buffer overflow in Snort RPC preprocessor (Mon Mar 03 2003 - 17:53:56 CST)
  • [Snort-2003-001] Buffer overflow in Snort RPC preprocessor (Mon Mar 03 2003 - 17:53:56 CST)
  • NOTE: [Snort-2003-001] Buffer overflow in Snort RPC preprocessor (Mon Mar 03 2003 - 18:22:10 CST)
  • Re: Protocol Anomaly Detection IDS (Mon Feb 17 2003 - 21:29:48 CST)
  • Re: Protocol Anomaly Detection IDS (Mon Feb 10 2003 - 20:04:52 CST)
  • Re: Active response... some thoughts. (Sat Jan 25 2003 - 22:27:36 CST)
• Matt Bing
  • Re: Did IDSes detect the SQL worm? (Wed Jan 29 2003 - 11:34:02 CST)
• Matt Harris
  • Re: IDS Stealth Mode (Thu Jan 09 2003 - 08:34:47 CST)
• Matt Simmons
  • Re: IDS Stealth Mode (Thu Jan 09 2003 - 07:48:32 CST)
  • Re: IDS Stealth Mode (Thu Jan 09 2003 - 07:48:32 CST)
• mb_lima
  • Re: Active response... some thoughts. (Tue Feb 11 2003 - 04:06:53 CST)
  • Re: Active response... some thoughts. (Fri Jan 31 2003 - 10:34:34 CST)
  • Re: Active response... some thoughts. (Wed Jan 29 2003 - 12:45:39 CST)
  • RE: Active response... some thoughts. (Tue Jan 28 2003 - 12:19:49 CST)
  • RE: Active response... some thoughts. (Mon Jan 27 2003 - 04:43:28 CST)
• Metcalfe, Greg
  • RE: how to verify whether an attack attempt is successful? (Wed Jan 15 2003 - 12:56:51 CST)
• Michael Katz
  • Re: Web server response to attacks (Thu Feb 20 2003 - 15:44:54 CST)
• Michael L. Artz
  • Protocol Anomaly Detection IDS (Tue Feb 04 2003 - 22:07:02 CST)
• Mike Barkett
  • Re: SQLSlammer Worm & IDSs (Wed Jan 29 2003 - 17:31:54 CST)
• Mike Shaw
  • Re: RES: Protocol Anomaly Detection IDS - Honeypots (Fri Feb 21 2003 - 10:54:23 CST)
• mike_at_honeynet.org
  • Snort-Inline drop rulebase (Mon Jan 13 2003 - 17:14:13 CST)
• mosquitoothgmx.net
  • IDS: portscan detection (Sun Mar 09 2003 - 04:50:28 CST)
• nate
  • Re: about mirroring port (Tue Mar 18 2003 - 20:50:53 CST)
• netsecurity
  • Re: Snort RPC Vulnerability (Mon Mar 03 2003 - 13:03:25 CST)
• Nicole Nicholson
  • RE: Intrusion Risk Assessment (Wed Jan 08 2003 - 11:11:16 CST)
• Niels Provos
  • results of the first honeyd challenge (Sat Mar 22 2003 - 14:00:33 CST)
  • The First Honeyd Challenge (Sun Feb 16 2003 - 23:26:55 CST)
  • Honeyd 0.5 release (Sat Feb 15 2003 - 17:06:20 CST)
• Omar Herrera
  • RE: new on IDSs (Sun Jan 26 2003 - 23:31:02 CST)
• Parnelli Vondel
  • RE: [IDS] IDS Common Criteria (Fri Jan 17 2003 - 23:41:59 CST)
• Pathmenanthan Ramakrishna
  • pH! Automated Response Using System-Call Delays (Tue Mar 25 2003 - 03:06:52 CST)
• Patrick S. Harper
  • Re: Working with/Setting up IDS (Papers) (Fri Mar 28 2003 - 07:10:51 CST)
• Paul D. Scallan, Jr.
  • RE: Voice over IP applications vulnerabilites/attacks ? (Thu Jan 02 2003 - 16:33:29 CST)
  • RE: Voice over IP applications vulnerabilites/attacks ? (Thu Jan 02 2003 - 12:13:48 CST)
  • RE: Voice over IP applications vulnerabilites/attacks ? (Thu Jan 02 2003 - 12:02:35 CST)
• Paul Palmer
  • Re: Active response... some thoughts. (Wed Jan 29 2003 - 16:32:27 CST)
• Paul Schmehl
  • Re: False Positives with IntruVert (Fri Mar 28 2003 - 12:17:24 CST)
• pbsarnac_at_thoughtworks.com
  • RE: Protocol Anomaly Detection IDS - Honeypots (Fri Feb 21 2003 - 16:55:54 CST)
• Pete Herzog
  • RE: RES: Protocol Anomaly Detection IDS - Honeypots (Fri Feb 21 2003 - 11:00:14 CST)
  • RE: Active response... some thoughts. (Thu Feb 06 2003 - 08:54:06 CST)
  • IDS security testing training (Wed Jan 29 2003 - 03:27:17 CST)
• Pete Lindstrom
  • Method to the Madness: Anomaly & Signature Redux (Thu Feb 06 2003 - 13:05:29 CST)
• Peter Schawacker
  • RE: Gig TAPs (Mon Feb 03 2003 - 12:13:59 CST)
  • RE: Gig TAPs (Fri Jan 31 2003 - 13:07:43 CST)
  • RE: IDS security testing training (Fri Jan 31 2003 - 10:19:45 CST)
• Peter Schwarz
  • FW: Intrusion Risk Assessment (Tue Jan 07 2003 - 11:39:28 CST)
• planz
  • Re: WLAN IDS (Mon Feb 17 2003 - 00:14:17 CST)
  • Re: WLAN IDS (Mon Feb 10 2003 - 22:56:39 CST)
• r)(o)(m
  • IDS Stealth Mode (Wed Jan 08 2003 - 08:39:55 CST)
• Ralph Los
  • RE: Active response... some thoughts. (Thu Feb 06 2003 - 23:51:35 CST)
  • RE: Active response... some thoughts. (Thu Feb 06 2003 - 23:41:22 CST)
  • RE: Active response... some thoughts. (Fri Jan 24 2003 - 11:38:53 CST)
  • NetScreen IDS (X-post) (Fri Jan 24 2003 - 11:48:49 CST)
• Randy Taylor
  • RE: [IDS] IDS Common Criteria (Wed Jan 22 2003 - 13:32:59 CST)
  • RE: [IDS] IDS Common Criteria (Wed Jan 15 2003 - 12:09:31 CST)
  • RE: [IDS] IDS Common Criteria (Mon Jan 13 2003 - 09:27:11 CST)
  • Re: [IDS] IDS Common Criteria (Tue Jan 07 2003 - 17:49:52 CST)
  • Re: [IDS] IDS Common Criteria (Tue Jan 07 2003 - 15:49:53 CST)
  • Re: [IDS] IDS Common Criteria (Tue Jan 07 2003 - 14:22:38 CST)
  • Re: [IDS] IDS Common Criteria (Mon Jan 06 2003 - 21:32:28 CST)
  • Re: OSEC [WAS: Re: Intrusion Prevention] (Fri Jan 03 2003 - 09:09:08 CST)
• Richard Bennison
  • re[2]: Intrusion Risk Assessment (Wed Jan 08 2003 - 10:52:05 CST)
• Rob McMillen
  • Release of snort_inline-1.9.1 (Wed Mar 05 2003 - 05:36:58 CST)
  • Re: sniffer detection on switched based networks (Wed Feb 05 2003 - 17:13:13 CST)
  • RE: Active response... some thoughts. (Wed Feb 05 2003 - 17:10:23 CST)
• Rob Shein
  • RE: about mirroring port (Tue Mar 18 2003 - 21:36:22 CST)
  • RE: Snort RPC Vulnerability (Mon Mar 03 2003 - 13:10:25 CST)
  • RE: Snort RPC Vulnerability (Mon Mar 03 2003 - 13:10:25 CST)
  • RE: Protocol Anomaly Detection IDS - Honeypots (Fri Feb 21 2003 - 16:07:03 CST)
  • RE: Protocol Anomaly Detection IDS - Honeypots (Fri Feb 21 2003 - 15:54:20 CST)
  • RE: Protocol Anomaly Detection IDS - Honeypots (Fri Feb 21 2003 - 14:45:57 CST)
  • RE: Protocol Anomaly Detection IDS - Honeypots (Fri Feb 21 2003 - 13:32:40 CST)
  • RE: Protocol Anomaly Detection IDS - Honeypots (Thu Feb 20 2003 - 18:48:36 CST)
  • RE: slow scans? (Tue Feb 18 2003 - 11:02:16 CST)
  • RE: WLAN IDS (Wed Feb 12 2003 - 10:10:39 CST)
  • RE: Active response... some thoughts. (Tue Feb 11 2003 - 11:06:23 CST)
  • RE: Active response... some thoughts. (Fri Feb 07 2003 - 14:48:44 CST)
  • RE: Active response... some thoughts. (Thu Jan 30 2003 - 11:17:14 CST)
  • RE: Snort-Inline and worm containment (Thu Jan 30 2003 - 11:13:04 CST)
  • RE: tcp overlap (Tue Jan 28 2003 - 12:31:13 CST)
  • RE: [IDS] IDS Common Criteria (Wed Jan 15 2003 - 09:42:34 CST)
  • RE: Intrusion Risk Assessment (Mon Jan 06 2003 - 18:35:42 CST)
• Robert Buckley
  • RE: Intrusion Risk Assessment (Tue Jan 07 2003 - 11:32:20 CST)
• Robert Graham
  • Re: Protocol Anomaly Detection IDS (Wed Feb 19 2003 - 17:25:41 CST)
• robert.d.turner_at_bt.com
  • Network Tap Technology (was: RE: Gig TAPs) (Wed Feb 05 2003 - 16:17:40 CST)
• Robert_Huber_at_bankone.com
  • RE: how to verify whether an attack attempt is successful? (Wed Jan 15 2003 - 14:02:28 CST)
  • Intrusion Risk Assessment (Mon Jan 06 2003 - 11:54:02 CST)
• Rodrigo Buarque Ramos
  • Triangulating packets (Wed Feb 12 2003 - 07:51:41 CST)
• Ron Gula
  • Re: slow scans? (Wed Feb 12 2003 - 13:30:15 CST)
  • Re: Active response... some thoughts. (Mon Jan 20 2003 - 22:01:07 CST)
  • RE: how to verify whether an attack attempt is successful? (Fri Jan 17 2003 - 11:08:19 CST)
  • re[2]: Intrusion Risk Assessment (Wed Jan 08 2003 - 22:33:49 CST)
• Sangram
  • sniffer detection on switched based networks (Tue Feb 04 2003 - 23:01:35 CST)
  • Re: Active response... some thoughts. (Tue Jan 28 2003 - 22:03:23 CST)
• SB CH
  • about mirroring port (Mon Mar 17 2003 - 18:36:45 CST)
• SCC
  • Re: Traffic logs to help with IDS testing and development (Tue Feb 11 2003 - 17:51:44 CST)
• Scott C. Kennedy
  • Re: Did IDSes detect the SQL worm? (Fri Jan 31 2003 - 13:01:51 CST)
  • Re: Did IDSes detect the SQL worm? (Wed Jan 29 2003 - 11:52:22 CST)
• Scott Wimer
  • Re: Active response... some thoughts. (Mon Feb 03 2003 - 11:16:45 CST)
  • Re: Costs of a compromise related to the detection time (Mon Feb 03 2003 - 11:08:35 CST)
  • Re: how to verify whether an attack attempt is successful? (Fri Jan 17 2003 - 10:46:01 CST)
• SecurityFocus
  • Re: Active response... some thoughts. (Fri Feb 07 2003 - 15:30:53 CST)
• Shaiful
  • Re: Snort-Inline and worm containment (Wed Jan 29 2003 - 18:29:46 CST)
• Sharath Malladi
  • models of internet attacks. (Thu Feb 20 2003 - 12:30:17 CST)
• Shashank Rai
  • RE: Active response... some thoughts. (Sun Jan 26 2003 - 22:17:49 CST)
• Sonit Jain
  • RE: Protocol Anomaly Detection IDS (Wed Feb 12 2003 - 04:10:36 CST)
• sstover
  • RE: Active response... some thoughts. (Thu Jan 23 2003 - 12:45:17 CST)
  • RE: interface-mirroring on a server (Wed Jan 22 2003 - 08:16:24 CST)
• Stan Burditzman
  • RE: Did IDSes detect the SQL worm? (Wed Jan 29 2003 - 11:38:38 CST)
• Stefano Zanero
  • Re: misuse detector (Mon Mar 24 2003 - 03:03:09 CST)
• Steven Richards
  • RE: Active response... some thoughts. (Tue Feb 11 2003 - 22:30:33 CST)
  • RE: Active response... some thoughts. (Tue Jan 28 2003 - 22:35:48 CST)
• Stone Cold
  • Re: Active response... some thoughts. (Thu Jan 30 2003 - 03:57:05 CST)
• supersekuritydude_at_hushmail.com
  • Sapphire worm and Real Secure Server Sensor (Thu Jan 30 2003 - 13:52:18 CST)
• Talisker
  • Re: Gig TAPs (Mon Feb 03 2003 - 13:41:26 CST)
  • Re: Gig TAPs (Fri Jan 31 2003 - 14:09:34 CST)
  • Re: Gig TAPs (Thu Jan 30 2003 - 14:27:38 CST)
  • Re: SQLSlammer Worm & IDSs (Wed Jan 29 2003 - 15:30:55 CST)
  • Re: Active response... some thoughts. (Mon Jan 27 2003 - 13:10:06 CST)
  • IDS Terminology (Fri Jan 24 2003 - 12:29:41 CST)
  • Re: IDS Stealth Mode (Thu Jan 09 2003 - 02:59:43 CST)
  • Re: [IDS] IDS Common Criteria (Tue Jan 07 2003 - 17:00:24 CST)
  • IDS Common Criteria (Mon Jan 06 2003 - 12:13:58 CST)
  • Re: Voice over IP applications vulnerabilites/attacks ? (Mon Jan 06 2003 - 12:15:15 CST)
• Tarek Abbes
  • Training IDS (Fri Mar 21 2003 - 02:58:13 CST)
• Terence Runge
  • RE: Did IDSes detect the SQL worm? (Mon Feb 03 2003 - 10:25:04 CST)
• Terry Ziemniak
  • Web server response to attacks (Thu Feb 20 2003 - 12:48:53 CST)
• Thierry Evangelista
  • RE: SQLSlammer Worm & IDSs (Wed Jan 29 2003 - 13:47:52 CST)
• Thomas H. Ptacek
  • Re: Active response... some thoughts. (Tue Feb 04 2003 - 11:57:42 CST)
  • Re: tcp overlap (Wed Jan 15 2003 - 15:36:14 CST)
• Toby Miller
  • Problems with Snort-1.9.1 (Thu Mar 27 2003 - 20:23:57 CST)
• Tod Beardsley
  • Re: slow scans? (Sun Feb 16 2003 - 12:33:23 CST)
• Todd Heberlein
  • Re: Active response... some thoughts. (Tue Jan 28 2003 - 17:24:32 CST)
  • Did IDSes detect the SQL worm? (Tue Jan 28 2003 - 17:41:40 CST)
  • SQL effect on stateful IDS and firewalls (Tue Jan 28 2003 - 17:31:35 CST)
• Tom McLaughlin
  • Snort-Inline and worm containment (Tue Jan 28 2003 - 20:19:17 CST)
• Trey A Mujakporue
  • RE: Snort RPC Vulnerability (Mon Mar 03 2003 - 17:04:39 CST)
• Umesh Shankar
  • RE: tcp overlap (Tue Jan 28 2003 - 13:29:24 CST)
  • Re: new on IDSs (Context-awareness in IDSes) (Mon Jan 27 2003 - 18:00:26 CST)
• vishal p
  • Anamoly based network IDS (Thu Mar 27 2003 - 01:03:29 CST)
• Vladimir
  • new on IDSs (Sun Jan 26 2003 - 05:10:49 CST)
• Will Schmied
  • WLAN IDS (Sat Feb 08 2003 - 20:29:03 CST)
• Yaakov Yehudi
  • Re: Protocol Anomaly Detection IDS (Tue Feb 11 2003 - 02:12:59 CST)
• Yan Zhai
  • Re: how to verify whether an attack attempt is successful? (Wed Jan 15 2003 - 16:32:43 CST)
  • how to verify whether an attack attempt is successful? (Mon Jan 13 2003 - 10:59:49 CST)
• Young, Keith
  • RE: IDS security testing training (Fri Jan 31 2003 - 10:11:01 CST)
• Zach Forsyth
  • RE: SQLSlammer Worm & IDSs (Wed Jan 29 2003 - 21:27:54 CST)

Last message date: Mon Mar 31 2003 - 11:30:09 CST
Archived on: Mon Mar 31 2003 - 11:30:10 CST

343 messages sorted by: [ date ] [ thread ] [ subject ]