Marty Roesch on Gartner re IDS: “Delusional, disingenuous, or am I really missing something here?”
Marty Roesch (Snort) dismisses the
“IDS is dead” message of Gartner analysts. Here’s the middle ground: Making the transition from potentially useful to really useful is hard, and requires lots of dedicated effort and talent. Most IDS deployments are fig leaves, buying some product because it
seemed like the right thing to do, but without committing the resources to keep it alive. Failure to actually make use of the data spewing out of it makes it a bad investment. Yes, the technology is improving, producing data that is more to-the-point. However, non-serious deployers are likely to maintain equilibrium by putting even less work into using the system.
