OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: CyberCop Monitor NT 2.5
From: dr_erik_wrightGMX.NET
Date: Tue May 23 2000 - 18:51:12 CDT

While playing with whisker's IDS evasion features, I determined that some
of the techniques employed are effective against Cybercop Monitor 2.5 on the
Windows NT platform.

This came as a great surprise to me since my company chose this product
because of the IDS evasion paper that Network Associates released a few years
ago. They don't seem to practice what they preach, just like every other
commercial security solution.

After doing some searching, I noticed that ISS Realsecure had a similar
problem that was reported on bugtraq a few months ago.

Thanks a bunch ISS and Network Associates. 

--
Sent through Global Message Exchange - http://www.gmx.net