I am working on IPS signatures to detect phising scams on wire. the points in my mind are IPS should have capabilty to validate the IP addresses using reverselookup or by maintaining a list of blacklisted IPs. to check SSL validation for commercial sites on wire to prevents url spoofing i would appreciate your comments and suggestion
thanks in advance ------------------------------------------------------------------------ Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more. ------------------------------------------------------------------------
