|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
bron
gmail.com
Date: Sun Jul 01 2007 - 22:01:15 CDT
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
I am sort of new to IDS. I am writing rule for IPS. If i have a rule which requires monitoring the argument of Mail From : SMTP command, then it may happen that my rule can get triggered inside the body of emails giving me false positives.
Any suggestions how can i remove such false positives ?
------------------------------------------------------------------------
Test Your IDS
Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw
to learn more.
------------------------------------------------------------------------
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]