Network Security White Papers
Undermining an Anomaly-Based Intrusion Detection System Using Common Exploits
Overview Earlier many anomaly-detection techniques have been proposed and/or deployed to provide early warnings of cyber-attacks, particularly of those attacks involving masqueraders and novel methods. To date, however, there appears to be no study which has identified a systematic method that could be used by an attacker to undermine an anomaly-based intrusion detection system. This paper shows how an adversary can craft an offensive mechanism that renders an anomaly-based intrusion detector blind to the presence of on-going, common attacks. It presents a method that identifies the weaknesses of an anomaly-based intrusion detector, and shows how an attacker can manipulate common attacks to exploit those weaknesses.
| Publisher | Springer Science+Business Media | File Format | |
|---|---|---|---|
| Date Published | October 2002 | ||
| Format | White Papers | ||
| Topics | |||
-
Did you find this white paper useful? 3 out of 8 users found this white paper useful
White Paper RSS
Download
Register
