Vendors say some customers are buying security systems but are not necessarily maintaining them. They fail to download patches and known signatures, leaving themselves open to the latest attacks. Purchasing an IDS is only a first step. A couple of months ago, it was compromising common Unix services. Distributed DoS attacks are still a real problem.
Customers have to continually protect themselves.
Most vendors agree that security needs to become more of a priority for customers. However, they don't necessarily agree how security should be implemented. Some advocate host IDSes that monitor traffic and logs, while others promote network IDSes that reside at the edge of the network. Pete Lindstrom, a security analyst at the Hurwitz Group, says the two security options are converging, and some vendors are beginning to offer more integrated products and services. Regardless of which architecture vendors pitch, effective security requires a multilayer defense.