New IOS Router security feature dynamically defends against day zero attacks - Calendar Of Updates

セキュリティ

Ciscoも12.4(15)T1からIPSを導入したそうです。パターンマッチ型らしいですね。

Automatic Signature Extraction (ASE) is a new feature in IOS release 12.4(15)T1 that is designed to find and stop worms and viruses on the network, day zero. To quote from one of the ASE developers Tin Yen, “the ASE feature is configured in the network to extract content specific signatures (often referred to as “patterns”) to help identify fast spreading worms and viruses by leveraging advanced deep packet inspection techniques”.