Slashdot Mirror

I remember last year Symbiot came out with a system called iSims or something for a similar purpose... http://www.symbiot.com/

From their Symbiot.NET page:

Symbiot.NET is our central repository of attacker profiles based on the cooperative surveillance and reconnaissance gathered by all network participants.
...
Symbiot.NET was designed for not only use with the Symbiot iSIMS platform, but also as an independent query tool from a web browser. In Q3 of 2004, Symbiot will open access to its Symbiot.NET database for ad-hoc queries and risk score retrievals.

This kind of system, whether implemented by Symbiot or someone else, and if done correctly, could provide a yardstick by which everyone could be measured. Even a partially flawed "risk metric" may be better than none, if the metric was applied systematically.

From their Symbiot.NET page:

Symbiot.NET is our central repository of attacker profiles based on the cooperative surveillance and reconnaissance gathered by all network participants.
...
Symbiot.NET was designed for not only use with the Symbiot iSIMS platform, but also as an independent query tool from a web browser. In Q3 of 2004, Symbiot will open access to its Symbiot.NET database for ad-hoc queries and risk score retrievals.

This kind of system, whether implemented by Symbiot or someone else, and if done correctly, could provide a yardstick by which everyone could be measured. Even a partially flawed "risk metric" may be better than none, if the metric was applied systematically.

Hmmm, it seems that another approach might also provide these desirable side benefits but also work to secure the Internet as a whole, and not have to use "Trusted" architectures. Although, there are new controversies from the following approach, in short, from my journal: "an emerging Internet security company, Symbiot is taking an entirely new, albeit controversial approach to Internet defense and cyberwarfare that should appeal to cyberpunks everywhere. Rather than the traditional passive response that has been used by sysadmins and CTO's worldwide, Symbiot is taking a more "active" defense approach by implementing a common subscription based access to a "threat database" that will allow participating networks to determine the degree of threat and respond democratically (by using the shared resources of other participating networks) and proportionally to the attack by allowing for a graduated response to cyber attacks. The potential of an asymmetrical response to a threat is also not out of the question.... Links for additional information are here and here."

I think all these companies proposing offensive attacks are half a loaf of stupid.
According to this PDF, the best defense is a good offense.

That is akin to fighting the battle of the bulge with the battlefield as a 6 foot wide hallway. Pretty soon, it's going to pile up with bodies. then you're just going to have a plugged up hole. Sure, the Battle is over, but you've both lost the ground.

Cnet is reporting that Texas-based Symbiot plans to release a corporate defense system that fights back against distributed denial-of-service and hacker attacks by launching counterstrikes. See the press report and white paper for more.

Cnet is reporting that Texas-based Symbiot plans to release a corporate defense system that fights back against distributed denial-of-service and hacker attacks by launching counterstrikes. See the press report and white paper for more.

Cnet is reporting that Texas-based Symbiot plans to release a corporate defense system that fights back against distributed denial-of-service and hacker attacks by launching counterstrikes. See the press report and white paper for more.