Michael N. Dundas

This is another “Expert Article” that I wrote for my previous consulting firm ISA . I am posting it here for reference only. It was back when Intrusion Prevention Systems (IPS) were entering the market and all the claims about how they were better then Intrusion Detection Systems (IDS). Clients were confused about the differences between the technologies themselves as well as the underlying mechanisms used to detect malware. It was an attempt to explain it so general I.T. and business folks could get a base understanding.

The original URL is here, but at some point I expect it to go away.
You can also find it at archive.org here.

This is a quick article I wrote for a client in my consulting role at ISA. It was published on their website for clients to read and comment on. It was relevant at the time (Sep 2003), but today the information is quite dated and no longer relevant at all. My experience with ISPs and the ongoing spam problem, the advances made in spam delivery by the spammers, and the RBL list technology basically staying the same and not changing, has caused them to be useless. I am adding it here, just to record it for reference.