Networks

Ask something
Discussion Locked

Can open source Intrusion detection systems can be effective?

0 helpful
1 reply

by fazmin.nizam 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Looking into the overview of technological issues associated with IDS, Further more by looking at the network bases systems and can argue that due to the high bandwidth requirements that are needed by network based intrusion detection systems (NIDS) the optimum approach may be to use an open source code and then invest funds in an expert that can tailor the programme to the needs of the client rather than buying a vendor version of a NIDS. Intrusion detection systems (IDS) are one of the fastest growing technologies within the security space. Unfortunately, many companies find it hard to justify acquiring IDS systems due to their perceived high cost of ownership. However, not all IDS systems are prohibitively expensive.

1 reply

by apotheon

As you seem to have realized yourself, open source IDSes can indeed be very effective. With the help of an expert, they can actually be much more effective than a commercial IDS -- which means the expert is a better place to spend your IDS budget than the software.

Snort isn't that difficult to use effectively, anyway. You may not even need a security expert. Just get your netadmin to handle it, if (s)he is competent.

This discussion is closed to new replies.