OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Fooling NIDS
From: Matías Bevilacqua (matiasFPCVERTEX.UPC.ES)
Date: Tue Dec 05 2000 - 09:43:53 CST

This idea has just occured to me (10sec. so don't blame me on it). Has
someone seen on the wild attackers fooling NIDS systems just to get security
personel running from host to host while silenlty compromising other systems
while sec. guys are occupied?

I'm talking about something like nmaps's -D option. Make 20 alarms jump
while you're randomly hacking at one of those machines. Sure you'll gain
some a time to conceal your traces.

What about setting off 1000 alarms just for fun? Could we coin that as ADoD
(Admin DoS)
¿Someone seen this out there?

See-ya.
Mat.