White Papers

In an effort to share our IPS-related knowledge and experience with the broad end user and vendor communities, the network IPS team at ICSA Labs has published the following white papers.
 

	Factors Affecting Network IPS Throughput
	ICSA Labs Network IPS Testing - An Introduction
	Determining Essential Coverage Protection for Network IPS Testing
	Background Traffic and Network IPS Testing
	Cleaning Packet Captures for Network IPS Testing
	Things Your Mother ... About Replaying Packet Captures Using Tomahawk

 

Multimedia Presentations

Tips for Optimizing IPS Performance and Security

View the slides

Core Security Webcast - Oct 2009 • Join Jack Walsh of ICSA Labs (jwalsh@icsalabs.com) and Mike Yaffe of Core Security Technologies for a webcast presentation on how to select the right network IPS for your organization and optimize it for maximum effectiveness. Jack shares ICSA Labs' objective methodology for testing and certifying IPS products - and gives you practical tips for selecting an IPS and configuring it for optimum performance and security.  • Running time ~60 mins. Linked to with permission.

ICSA Labs: IPS Testing

View the slides

RSA Conference 2007 - Feb 2007 • Network IPS experts fielded questions about the state of intrusion prevention, the landscape of evolving threats, and questions about their experiences with ICSA Labs Network IPS testing. Jack Walsh, the ICSA Labs Intrusion Detection & Prevention Program Manager (jwalsh@icsalabs.com), was the moderator of the panel. He was accompanied by panelists from Fortinet, IBM Internet Security Systems, TippingPoint, and BroadWeb. • Running time ~70 mins. Edited and used with permission.

 

Open Source

Beyond white papers and presentations, ICSA Labs has helped the open source community through its work on improving the Tomahawk testing tool which is useful for properly replaying packet captures in network IPS testing. Nearly 40% of all Tomahawk code was written by ICSA Labs. Review the improvements that ICSA Labs made to Tomahawk and fed back into the open source project.  

•	ICSA Labs' Tomahawk Enhancements