OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Verified evasion in Snort

From: Thierry Zoller (ThierryZoller.lu)
Date: Wed Feb 01 2006 - 12:50:15 CST


Dear List,

asc> Dan Kaminsky gave a presentation at shmoocon and mentioned using
asc> ip fragmentation timers to evade intrusion detection systems.
Just FYI, for Risk Assesement, this information has already been presented
last year by Dan at Defcon13 .

--
http://secdev.zoller.lu
Thierry Zoller
Fingerprint : 5D84 BFDC CD36 A951 2C45 2E57 28B3 75DD 0AC6 F1C7