Anomaly detection is an important part of any layered security solution. Intrusion detection, intrusion prevention and log analysis systems can be critical to identifying trouble areas and potential security breaches. However, when not properly configured, the technology is as useful as a $10,000 paperweight. This tip looks at problems administrators face when implementing these tools and provides suggestions on how to increase the amount of valid information they provide.

Read the full article: Maximizing IDS/IPS implementations

Published in SearchNetworking on 08/23/05