Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 1 down vote favorite

I am implementing an IDS and just want to know that what are the possibilities with which the intrusion can occur.I am just doing a literature survey over the atacks possible so I want to know that what are the types of intrusions possible in host that can compromise the security of the system which can help make me the system better.

share|improve this question
4  
Every service the host offers, offers also an opportunity worth checking for exploitation. Buffer overflows, local access, remote access, misconfigured policies that allow stuff that is not supposed to, policy exceptions, implementation that does not follow the desired specification design, ... – adamo Jan 20 '12 at 12:31
@adamo : thanks for reminding me the services..:) – Pankaj Anand Jan 20 '12 at 22:59

closed as not a real question by Iszi, Chris Andrè Dale, AviD♦ Feb 23 '12 at 21:44

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, see the FAQ.

1 Answer

up vote 2 down vote accepted

There are a few thousand CWEs used to classify tens of thousands of vulnerabilities. That should come pretty close to addressing this problem.

Oah and don't forget about application/protocol specific encoding. That is the bread and butter of IDS/IPS bypass.

share|improve this answer
Thanks for the links.. – Pankaj Anand Jan 20 '12 at 23:00

Not the answer you're looking for? Browse other questions tagged or ask your own question.