External web site monitoring as a part of online security system?

[tanya004]

Hi everybody!
What do you think of web site monitoring, network monitoring and website load testing as components of online security system? Have you ever tried such services?
We need your feedback for the quality improvement.
Thanks in advance for your ideas and comments!

[Gouranga]

Depends on what exactly you are monitoring. Hits from specific IP ranges for a given amount of time. Processor % utilized by a given site, pinging, port scanning activities, etc. Another issue would be exactly how much performance hit you would take from such a service.

First thought. Web site load testing should be a part of any test process prior to any site being pushed to production, not as much for security as for functionality, but you would also need to be sure buffer overruns were not an issue which can also be controlled by the identity the web site is running under.