Re: Evasion attacks - application level

[Mayank-Bhatnagar <mayank () ncb ernet in>]

hi,

Well, in case of Evasion of IDS one of the papers that I found very
informative is

Insertion, Evasion, and Denial of Service: Eluding Network Intrusion
Detection

by

Thomas H. Ptacek
Timothy N. Newsham


and in case you are considering explicitly some protocols, applications,
for HTTP well, you can refer a tool/library libwhisker, which contains
some very interesting cases of evading web servers, web vulnerability
detectors, IDS  etc.


Regards,
Mayank Bhatnagar


68 Electronics City ,
National Centre for Software Technology,
http://www.ncb.ernet.in
Bangalore-560100.
080-28523300/28520259-1200



On 2 Jun 2004, Ilija Basicevic wrote:

> Besides Greg Hoglund, Jon Gary, <<Multiple Levels of De-synchronization and other concerns with testing an IDS system 
> > > , are there any other
> papers or other sort of info regarding evasion attacks at application
> level ?
>
> Ilija
>
> ---------------------------------------------------------------------------
>
> ---------------------------------------------------------------------------


---------------------------------------------------------------------------

---------------------------------------------------------------------------