Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I am implementing an IDS and just want to know that what are the possibilities with which the intrusion can occur.I am just doing a literature survey over the atacks possible so I want to know that what are the types of intrusions possible in host that can compromise the security of the system which can help make me the system better.

share|improve this question
4  
Every service the host offers, offers also an opportunity worth checking for exploitation. Buffer overflows, local access, remote access, misconfigured policies that allow stuff that is not supposed to, policy exceptions, implementation that does not follow the desired specification design, ... –  adamo Jan 20 '12 at 12:31
    
@adamo : thanks for reminding me the services..:) –  Pankaj Anand Jan 20 '12 at 22:59
add comment

closed as not a real question by Iszi, Chris Andrè Dale, AviD Feb 23 '12 at 21:44

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.If this question can be reworded to fit the rules in the help center, please edit the question.

1 Answer

up vote 2 down vote accepted

There are a few thousand CWEs used to classify tens of thousands of vulnerabilities. That should come pretty close to addressing this problem.

Oah and don't forget about application/protocol specific encoding. That is the bread and butter of IDS/IPS bypass.

share|improve this answer
    
Thanks for the links.. –  Pankaj Anand Jan 20 '12 at 23:00
add comment

Not the answer you're looking for? Browse other questions tagged or ask your own question.