About the IDS issue

• Also there are things you ought to monitor as well:

  • Temperature on processor
  • Water or beer in the computer
  • Daily cron jobs
  • Attacks that succeed on one computer that need verification somewhere else.

• Most IDS are very import but:

  • They work either real-time
  • Retro-active hourly/daily e-mail
  • Miss the big picture