Performance Testing and Benchmarking of Intrusion Detection Systems
Marcus Ranum, Chief Technical Officer, Network Flight Recorder Inc, USA

Technical Stream - Friday 3 November 2000

Testing intrusion detection systems (IDS) is still a black art. However, many sites are evaluating IDS for deployment, and are attempting to derive sensible ways of testing products. Unfortunately, this turns out to be a difficult proposal, leaving many pitfalls for the unwary that might make systems appear to perform worse (or better) than they should. In this presentation, we will discuss some of the issues and propose possible steps toward implementing effective IDS tests.

Back to programme