Threat Level: green Handler on Duty: Rob VandenBrink

SANS ISC: Evation because IPS fails to validate TCP checksums? - SANS Internet Storm Center SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms: https://isctv.sans.edu

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Evation because IPS fails to validate TCP checksums?

Guess what: it is possible!. Judy Novak posted an excellent article demonstrating it. Read it at http://www.packetstan.com/2010/07/potential-evasion-where-ips-fails-to.html

-- Manuel Humberto Santander Peláez | http://twitter.com/manuelsantander | http://manuel.santander.name | msantand at isc dot sans dot org

 Manuel Humberto Santander Pelaacuteez

195 Posts
ISC Handler
Aug 2nd 2010
Thread locked Subscribe Aug 2nd 2010
1 decade ago

Sign Up for Free or Log In to start participating in the conversation!