An overview of network evasion methods

Information Security Technical Report

Volumn 10, Issue 3, 2005, Pages 140-149

  Hernacki, Brian ^a,b   Bennett, Jeremy ^a,c,d   Hoagland, James ^a,e  

^a SYMANTEC RESEARCH LABS   (United States)

^b Recourse Technologies   (United States)

^c Gateway Security Product Group

^d Symantec Decoy Server Products

^e Symantec

Author keywords

[No Author keywords available]

Indexed keywords

NETWORK EVASION METHODS; NETWORK SECURITY; SECURITY DEVICES;

COMPUTER NETWORKS; INFORMATION TECHNOLOGY; NETWORK PROTOCOLS; RISK ASSESSMENT;

SECURITY OF DATA;

EID: 27644486238     PISSN: 13634127     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.istr.2005.07.003     Document Type: Article

References (29)

1. Evading intrusion detection Mar 2005
2. Fragrouter Mar 2005
3. Gigabit IDS performance testing
4. R. Graham SideStep: IDS evasion tool Mar 2005
5. E. Hacker IDS evasion with unicode Mar 2005
6. Handley M, Paxson V, Kreibich C. Network intrusion detection: evasion, traffic normalization, and end-to-end protocol semantics. In: Proceeding USENIX security symposium; 2001.
7. Hypertext transfer protocol Mar 2005
8. Inappropriate TCP resets considered harmful Mar 2005
9. P. Innella The evolution of intrusion detection systems Mar 2005
10. Internet protocol Mar 2005
11. Lee W, Cabrera J, Thomas A, Balwalli N, Saluja S, Zhang Y. Performance adaptation in real-time intrusion detection systems. In: Proceedings of the 5th international symposium on recent advances in intrusion detection (RAID 2002), Zurich, Switzerland; Oct 2002.
12. Network intrusion-prevention systems Mar 2005
13. M. Norton Optimizing pattern matching for intrusion detection 7 Jul 2004
14. J. Novak DNS evasion techniques and beyond Mar 2005
15. G. Ollmann URL encoded attacks Mar 2005
16. OpenSSH kbd - interactive buffer overflow Mar 2005
17. D. Pack, W. Streilein, S. Webster, and R. Cunningham Detecting HTTP tunneling activities Mar 2005
18. Paxson V. Bro: a system for detecting network intruders in real-time. In: Proceedings of the USENIX security symposium; 1998.
19. T. Ptacek, and T. Newsham Insertion, evasion, denial of service: eluding network intrusion detection Mar 2005
20. R. Puppy A look at whisker's anti-IDS tactics Mar 2005
21. D. Roelker HTTP IDS evasions revisited Mar 2005
22. RPC: remote procedure call specification Mar 2005
23. SMB: the server message block protocol Mar 2005
24. K. Timm IDS evasion techniques and tactics Mar 2005
25. Transmission control protocol Mar 2005
26. UTF8: what is it and why is it important? Mar 2005
27. Valdes A, Skinner K. Probabilistic alert correlation. In: Proceedings of the 4th international symposium on recent advances in intrusion detection (RAID 2001); 2001.
28. Vigna G, Robertson W, Balzarotti D. Testing network-based intrusion detection signatures using mutant exploits. In: Proceedings of the 11th ACM conference on computer and communications security; 2004.
29. P. Watson Slipping in the window: TCP reset attacks Oct 2003