IDS: Re: study on subverting IDSs

From: jipi dini <jipidini_at_gmail.com>
Date: Sat, 7 Jan 2006 01:36:09 -0500

Hi,

On 1/3/06, Nomellames nunca <nomesigas_at_gmail.com> wrote:
> I want to test IDS against subversion attacks (attacks directed to
> the IDS itself or any of the element used by the IDS for collecting
> and reporting in order to modify their result). I would like to test a
> mixture of different IDS solutions.
>
> I already have a good list of IDS solutions I want to study, but I
> would like your opinion on possible target for this study, as I work
> in academia and deal mainly with open solutions, like SNORT or
> Emerald.

It would be interesting to see what you could find on the Dragon [N,H]ids.
You can get a 30 day trial at
http://www.enterasys.com/products/ids/demo-instructions.html

--
Thanks,
JiPi DiNi

Received on Jan 10 2006