Network Security White Papers
Cisco Security Advisory: Cisco Secure Intrusion Detection System Signature Obfuscation Vulnerability
Overview Intrusion Detection Systems inspect network traffic for suspect or malicious packet formats, data payloads and traffic patterns. Intrusion detection systems typically implement obfuscation defense - ensuring that suspect packets cannot easily be disguised with UTF and/or hex encoding and bypass the Intrusion Detection systems. Recently, the CodeRed worm has targeted an unpatched vulnerability with many MicroSoft IIS systems and also highlighted a different encoding technique supported by MicroSoft IIS systems. This encoding technique known as %u can be used to circumvent intrusion detection systems, and has been made public by eEye security in their announcement.
| Publisher | Cisco | File Format | HTML |
|---|---|---|---|
| Date Published | September 2002 | Downloads | 7 |
| Format | White Papers | ||
| Topics | |||



