Running a World Class Intrusion Detection Program: More Than Just Picking the Right Tool

In today's security landscape, Intrusion detection systems have joined firewalls as 'must have' tools but getting the greatest benefit from these devices requires much more than a deploy and move on strategy. IDS requires constant care and feeding as the environment being protected changes and new threats are being released on an ever-more frequent basis. Proper implementation on-going support and constant event analysis are crucial to the success of an IDS program. This paper will discuss best practices in managing an IDS program to ensure that an organization is gaining the most benefit from the IDS.