IDS: Re: study on subverting IDSs

[jipi dini <jipidini () gmail com>]

Hi,

On 1/3/06, Nomellames nunca <nomesigas () gmail com> wrote:
> I want to test IDS against subversion attacks (attacks directed  to
> the IDS itself or any of the element used by the IDS for collecting
> and reporting in order to modify their result). I would like to test a
> mixture of different IDS solutions.
>
> I already have a good list of IDS solutions I want to study, but I
> would like your opinion on possible target for this study, as I work
> in academia and deal mainly with open solutions, like SNORT or
> Emerald.

It would be interesting to see what you could find on the Dragon [N,H]ids.
You can get a 30 day trial at
http://www.enterasys.com/products/ids/demo-instructions.html


--
Thanks,
JiPi DiNi