home
NEWS       BLOGS       FORUMS       NEWSLETTERS       RESEARCH       EVENTS       DIGITAL LIBRARY       CAREERS  
Network Computing Network Computing Powered by InformationWeek Business Technology Network

IMMERSE YOURSELF:

SOA

  |

Data Center

  |

802.11n

  |

Data Privacy

  |
APO  |

Virtualization

  |

NAC

  |

Security

  |

Network Mgmt

  |

Enterprise Apps

  |

Storage & Servers



  F E A T U R E

Evading NIDS With Silly Packet Games

November 13, 2000


If you've followed the IDS scene, you are probably sick of reading about the various packet games that fool NIDS products. Unfortunately, some network IDS vendors apparently still don't get it. More then a year after we first called a number of vendors out on this painful shortcoming, and almost three years since Thomas H. Ptacek and Timothy N. Newsham first published a white paper about the problems (see secinf.net/info/ids/idspaper/idspaper.html), the issues still exist. Thankfully, some of the big players, like Cisco and ISS, have finally addressed some of these techniques in the latest revisions of their products. Rest assured we'll be testing the effectiveness of their implementations.

For the uninitiated, there are a number of tricks you can use to evade network-based intrusion-detection devices. Among them are fragmenting packets, monkeying with the ordering of TCP streams and fragmenting RPC calls. The concepts detailed in Ptacek and Newsham's paper were driven home when Dug Song, who at the time was working for Anzen (an IDS vendor), wrote a program called fragrouter. Fragrouter is an open-source tool for implementing some of the packet-mangling techniques Ptacek and Newsham discussed. While the concept is not rocket science, Song's program is a practical implementation of a tool that was embraced on a global scale by vendors and intruders.

So if the white paper wasn't enough, intruders now have the actual tools to bypass most systems...and bypass they do. Vendors of intrusion-detection technology face some tough challenges, but this is one that should have been put in the bag years ago.



PAGE: 1 I 2 I 3 I 4 I 5 I 6 I FIRST PAGE
 





Ready to take that job and shove it?

Function:

Keyword(s):

State:
SPONSOR
RECENT JOB POSTINGS
CAREER NEWS
Go beyond Google and get vertical. These specialized search sites will help you find the business information you need -- fast.

Ari Balogh was named to the post of chief technology officer as the companys for a "realignment" of employees.










InformationWeek U.S. IT Salary Survey 2008
Salaries for business technology professionals are falling. Here's what you need to know in order to make good hiring decisions and personal career choices. Download Today
 
ROLLING RIGHT ALONG
Follow key Network Computing Reviews from conception to completion. This Week: Holistic APM.



Network Computing Reports Emerging Enterprise Podcast Series: Secrets to Success








TechSearch


Microsite of the Week


Powerful Information at Your Fingertips



InformationWeek Business Technology Network
InformationWeekInformationWeek 500InformationWeek 500 ConferenceInformationWeek AnalyticsInformationWeek CIO
InformationWeek EventsInformationWeek ReportsInformationWeek MagazinebMightyByte and SwitchDark Reading
Digital LibraryIntelligent EnterpriseInternet EvolutionNetwork ComputingNo JitterPlug Into The Cloud
space
Techweb Events Network
InteropVoiceConWeb 2.0 ExpoWeb 2.0 SummitEnterprise 2.0 ConferenceMobile Business ExpoSoftware ConferenceCSI - Computer Security Institute
Black HatGTECEnergy CampMashup CampStartup Camp
space
Light Reading Communications Network
Light ReadingLight Reading EuropeUnstrungLight Reading's Cable Digital NewsConstantinopleInternet EvolutionPyramid Research
Heavy ReadingLight Reading Live!Light Reading InsiderEthernet ExpoOptical ExpoTeleco TVTower Technology Summit
space
Financial Technology Network
Advanced TradingBank Systems & TechnologyInsurance & TechnologyWall Street & TechnologyAccelerating Wall StreetBank Systems & Technology Executive SummitBuyside Trading SummitInsurance & Technology Executive Summit
space
Microsoft Technology Network
MSDN MagazineTechNetThe Architecture Journal
space


App Infrastructure   |   Messaging & Collaboration   |   Network & Systems Mgmt   |   Network Infrastructure   |   Security  |   Storage & Servers   |   Wireless   |   Enterprise Apps
About Us  |  Contact Us  |  Site Map  |  Technology Marketing Solutions  |  Advertising Contacts  |   Briefing Centers
Copyright © 2008  United Business Media LLC  |  Privacy Statement  |  Terms of Service  |  Your California Privacy Rights