A lot of the commercial ones do. TippingPoint has quite a few spyware signatures. ISS has some. Don't know about Symantec or Cisco.
Some AV will detect spyware, but not all. And even then, AV tends not to be very good at blocking communication of already installed spyware. ___________________________________ Andrew Plato, CISSP President/Principal Consultant Anitian Enterprise Security -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Thursday, October 06, 2005 11:13 PM To: [email protected] Subject: IDS and Spywares Could anyone in the group name a few IDS which detect spywares. In my view spywares are to be detected by an antivirus system and not by a network device. ------------------------------------------------------------------------ Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more. ------------------------------------------------------------------------ ------------------------------------------------------------------------ Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more. ------------------------------------------------------------------------
