http://www.networkforensics.com/2010/01/26/ids-legacy-is-institutionalized-failure/ Tue, 20 Jul 2010 16:25:20 +0000 http://wordpress.org/?v=2.9.1 hourly 1 http://www.networkforensics.com/2010/01/26/ids-legacy-is-institutionalized-failure/comment-page-1/#comment-45 Ogre_in_the_Barrow Thu, 18 Feb 2010 15:35:10 +0000 http://www.netwitness.com/blog/?p=77#comment-45 I agree with you. Too often customers say "just make it work" without understanding in even general terms HOW "it" works. I have found that a knowledgable person with time and some basic tools can provide "after the fact" analysis -- which can be applied to the future. Unfortunately, customers often want "Security" fast and cheap. The joke in my shop is customers must think we have magic pixie dust. Bottom line: Security tools are not infalliable, they only MITIGATE risk not eliminate it. I agree with you. Too often customers say “just make it work” without understanding in even general terms HOW “it” works. I have found that a knowledgable person with time and some basic tools can provide “after the fact” analysis — which can be applied to the future. Unfortunately, customers often want “Security” fast and cheap. The joke in my shop is customers must think we have magic pixie dust. Bottom line: Security tools are not infalliable, they only MITIGATE risk not eliminate it.

]]>