IDS: Re: A Neural Network to detect polymorphic shellcodes

From: Stefano Zanero <s.zanero_at_securenetwork.it>
Date: Thu, 17 Aug 2006 14:12:28 +0200

mimanium_at_hotmail.com wrote:
> Hello,
>
> I am loking for project that implement Neural Networks and spectrum analysis to detect polymorphic shellcodes such as those of ADMutate.

This seems like a bad case of "pushing a technique onto a problem" or
better "buzzword fascination problem".

Spectral analysis is useful on continuous variables. How would you
represent "a shellcode" as a continuous variable or multivariate series
of continuos variables ?

Neural networks themselves are more useful on metric variables than on
qualitative variables. And here again: on what metrics and features
would you train them ?

Stefano

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
------------------------------------------------------------------------
Received on Aug 17 2006