Re: Secure time sync and IDS

[stuart () SiliconDefense com (Stuart Staniford)]

Archive: http://msgs.securepoint.com/ids
FAQ: http://www.ticm.com/kb/faq/idsfaq.html
IDS: http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
UNSUBSCRIBE: email "unsubscribe ids" to majordomo () uow edu au

Lawrence Teo wrote:

> Does anyone know of any resources about intrusions and attacks geared towards
> modifying the victim hosts' clocks? Info on time-related attacks would be good
> too.

This is old but directly relevant:

http://seclab.cs.ucdavis.edu/~bishop/scriv/Bish90b.pdf

Stuart.

-- 
Stuart Staniford  ---  President  ---  Silicon Defense
                   stuart () silicondefense com
(707) 445-4355                     (707) 445-4222 (FAX)