Evaluating a WLAN IDS Solution

http://csrc.nist.gov/publications/nistpubs/800-31/sp800-31.pdf

try that paper.

Vendor selection for IDS really centers around how much $$ you got to spend, how big a network your trying to protect, and how much time you wish to spend monitoring the whole deal. If you've got a security staff which is only responsible for monitoring security of the system, you can get something that pretty much will tell you what the intruder ate for breakfast, what they fed the pet dog that morning, what color car they drive. If it's just you manning the lonely lowly IT department you can get something that will block most of the known intrusion attempts, send you an email when it happens and log day, date, time and source IP address [spoofed or not]. Then you can monitor the WLAN link with something like Snort to get more detailed info.

IDS systems can range [new] from the simple consumer level for $50 to $60 as in Norton Personal Firewall which has an intrustion detection system on up to a $100k or more for a big hefty system that monitors all hosts on all subnets throughout the entire network including remote sites.

Again vendor selection is how much $$ you got to spend and how much capability you need.

Well, you covered cost. You may have not noticed you were given some good info above. Here is my take on it. Ease of use, details given, notification system, scope/suitabilty, service/support of product, product compatability, necessary additional hardware for functionality, product reliabilty, documentation and cost are all valid evalutions to use.

This question was closed by the author