Intrusion Detection

Last Updated on 31 Aug. 2011, Total: 27 Articles and Tutorials

  1. Operating System Fingerprinting with Packets (Part 1)

    • by Chris Sanders
    • Published on 31 Aug. 2011

    In this article series I will describe active and passive OS fingerprinting, the concepts that make them plausible, and go through some examples of how to do this in a manual and automated fashion... Read More

  2. Network Inspection System Enhances Security for Microsoft Security Essentials and the TMG Firewall

    This article discusses network traffic inspection, specifically Microsoft’s Network Inspection System (NIS) that is now found in both TMG firewall and Microsoft Security Essentials. NIS provides an exceptional level of security for networks that contain Windows servers and client systems... Read More

  3. Collecting Threat Intelligence (Part 2)

    • by Chris Sanders
    • Published on 19 Jan. 2011

    This article deals with the available resources that help us take informed decisions about unknown systems that are communicating with our network... Read More

  4. Collecting Threat Intelligence (Part 1)

    • by Chris Sanders
    • Published on 1 Dec. 2010

    This two-part article discusses techniques for collecting publicly available information on obscure IP addresses and domain names that pop up anomalously on your network... Read More

  5. Packet fragmentation versus the Intrusion Detection System (IDS) Part 2

    • by Don Parker
    • Published on 19 April 2007

    More advanced fragrouter options to attempt IDS evasion... Read More

  6. Packet fragmentation versus the Intrusion Detection System (IDS) Part 1

    • by Don Parker
    • Published on 11 April 2007

    Packet fragmentation and how it can affect the IDS... Read More

  7. Tools of the Trade revisited (Part 3)

    • by Don Parker
    • Published on 15 Nov. 2006

    A look at how Snort views a tool called Cain & Abel... Read More

  8. Tools of the Trade revisited (Part 2)

    • by Don Parker
    • Published on 18 Oct. 2006

    The first part of this article series looked at how an IDS could possibly detect certain security tools. Covered was a packet sniffer and network scanner. This article continues with the analysis... Read More

  9. Tools of the Trade revisited (Part 1)

    • by Don Parker
    • Published on 3 Oct. 2006

    This article series revisits the article series called “Tools of the Trade”. This time however it will be looked at from the IDS’s perspective... Read More

  10. Writing Egress Filters for your IDS

    • by Don Parker
    • Published on 28 June 2006

    In this article we will look at ways of discovering system compromises based on outgoing IDS signatures... Read More

Featured Links