[359] in Intrusion Detection Systems

home help back first fref pref prev next nref lref last post

Re: Internet Scanner (ISS) info

daemon@ATHENA.MIT.EDU (adamsb@un.org)
Tue Sep 26 03:33:53 1995

From: adamsb@un.org
Date: Sun, 24 Sep 95 18:29:42 EST
To: ids@uow.edu.au
Cc: aseymour@cix.compulink.co.uk
Reply-To: ids@uow.edu.au

> Does anyone have any info regarding
> this product.

    I believe that the people who sell it subscribe to this list.
    People are reluctant to say what they actually use on Internet lists.

    Personally, I use everything I can get my hands on.  Of course I'm
    paranoid, but am I paranoid enough? :-)

    Earlier this year I took a look at the commercial version of ISS and
    concluded that it is at least three times more powerful than SATAN.
    I also took a look at Pingware from Bellcore, which has a different
    design philisophy.  Whereas ISS very efficiently probes for security
    holes and will tell you what they are, Pingware is an automatic hacker
    and highly effective.

    If your company can afford it, get both ISS and Pingware.  I believe
    that if you use both and patch the holes you find, then nobody is going
    to be able to crack your systems (unless they can get a packet sniffer
    into your network, in which case you need to add encryption).

                                      Hog Farmer,
                                      Tropical Hog Improvement Programme

home help back first fref pref prev next nref lref last post