Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am implementing an IDS and just want to know that what are the possibilities with which the intrusion can occur.I am just doing a literature survey over the atacks possible so I want to know that what are the types of intrusions possible in host that can compromise the security of the system which can help make me the system better.

share|improve this question

closed as not a real question by Iszi, Chris Dale, AviD Feb 23 '12 at 21:44

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.If this question can be reworded to fit the rules in the help center, please edit the question.

Every service the host offers, offers also an opportunity worth checking for exploitation. Buffer overflows, local access, remote access, misconfigured policies that allow stuff that is not supposed to, policy exceptions, implementation that does not follow the desired specification design, ... – adamo Jan 20 '12 at 12:31
@adamo : thanks for reminding me the services..:) – Pankaj Anand Jan 20 '12 at 22:59
up vote 2 down vote accepted

There are a few thousand CWEs used to classify tens of thousands of vulnerabilities. That should come pretty close to addressing this problem.

Oah and don't forget about application/protocol specific encoding. That is the bread and butter of IDS/IPS bypass.

share|improve this answer
Thanks for the links.. – Pankaj Anand Jan 20 '12 at 23:00

Not the answer you're looking for? Browse other questions tagged or ask your own question.