“You can have two different types of IDS products — say Snort and Cisco. Both can detect a buffer overflow. But Snort might call it ‘xyz,’ whereas Cisco calls it ‘wpq,’ but it’s the same attack,” says ...