8 search results - page 1 / 2 » Detecting evasion attacks at high speeds without reassembly |
SIGCOMM
2006
ACM
13 years 11 months ago
2006
ACM
Ptacek and Newsham [14] showed how to evade signature detection at Intrusion Prevention Systems (IPS) using TCP and IP Fragmentation. These attacks are implemented in tools like F...
DIMVA
2011
12 years 8 months ago
2011
Abstract. High-interaction honeyclients are the tools of choice to detect malicious web pages that launch drive-by-download attacks. Unfortunately, the approach used by these tools...
FPL
2004
Springer
13 years 10 months ago
2004
Springer
Field Programmable Gate Arrays (FPGAs) can be used in Intrusion Prevention Systems (IPS) to inspect application data contained within network flows. An IPS operating on high-speed...
INFOCOM
2007
IEEE
13 years 11 months ago
2007
IEEE
Abstract—Deep packet inspection (DPI) is often used in network intrusion detection and prevention systems (NIDPS), where incoming packet payloads are compared against known attac...
IWNAS
2008
IEEE
13 years 11 months ago
2008
IEEE
∗ As one type of stealthy and hard-to-detect attack, lowrate TCP-targeted DDoS attack can seriously throttle the throughput of normal TCP flows for a long time without being noti...