Trapping and Tracking Hackers: Collective Security for Survival in the Internet Age
Douglas B. Moran, Vice Président · 2000
Problems arise because these tools are too often expected to provide broader coverage than their designs permit. The limitations of prevention tools are that (1) there is typically a large gap in time between the identification of the vulnerability and the availability of the solution, and (2) partial and faulty deployment resulting in gaps in coverage. Tools for response to individual attacks typically have significant false negative rates (e.g., tunneling through firewalls) or high false positive rates (intrusion detection systems). With these tools, there is also a gap between the onset of new types of attack and when signatures/rules become available to handle them.