Why detect when you can prevent? Is removal of spyware your objective? If it is, consider deploying a content filtering gateway that is able to detect and remove spyware from web traffic that is downloaded when your internal users surf the Internet. Even if an IDS is able to detect spyware, it is likely that it does so using signatures created after a known malicious spyware is researched and added into its signature base. Certain content filtering gateways are able to remove spyware based on known spyware characteristics or their malicious/suspicious behaviour.
------------------------------------------------------------------------ Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more. ------------------------------------------------------------------------
