Putting Intrusion Detection into Intrusion Detection Systems

Explore a comprehensive conference talk from Black Hat USA 1999 that delves into the limitations of traditional intrusion detection systems (IDS) and proposes innovative approaches to enhance their effectiveness. Learn why current IDS devices, typically positioned outside perimeter defenses, fall short by focusing solely on detecting and reporting deflected attacks from incoming traffic. Discover potential strategies for improving IDS capabilities, including the integration of more proactive detection methods and expanding coverage to internal network activities. Gain valuable insights from speaker Jon David on how to evolve intrusion detection systems to better protect against modern cybersecurity threats in this two-hour presentation.