TCP - IP White Papers
Target-Based TCP Stream Reassembly
Overview In their landmark 1998 paper, "Insertion, Evasion, and Denial of Service: Eluding Network Intrusion Detection," Thomas Ptacek and Timothy Newsham exposed some weaknesses in Intrusion Detection Systems (IDS). The authors revealed that intrusion detection systems cannot be effective and accurate because they do not necessarily process, or perhaps, even observe network traffic exactly as the destination host that receives the message does. This flaw exists in several layers of evaluation and processing of the packets including the IP, TCP, and application layers. As an example of the problem, consider traffic that has overlapping TCP segments that are sent to a given host.
| Publisher | Sourcefire | File Format | |
|---|---|---|---|
| Date Published | August 2007 | Downloads | 1 |
| Format | White Papers | ||
| Topics | |||
-
Did you find this white paper useful? 2 out of 5 users found this white paper useful
White Paper RSS
Download
Register
