Dismantling intrusion prevention systems

This paper introduces a serious security problem that people believe has been fixed, but which is still very much existing and evolving, namely evasions. We describe how protocols can still be misused to fool network security devices, such as intrusion prevention systems. Categories and Subject Descriptors C.2.0 [Computer Communication Networks]: Security and protection. General Terms Security. Keywords Network, intrusion prevention, evasion, IDS, IPS.

• Type: Journal
• Year: 2012
• Where: SIGCOMM
• Authors: Olli-Pekka Niemi, Antti Levomäki, Jukka Manner
• Keywords: Communications, Computer Communication Networks, Intrusion Prevention Systems, Network Intrusion Prevention, SIGCOMM 2012