Tagged Questions
-2
votes
0answers
31 views
Generate NetBIOS traffic over TCP [closed]
I'm attempting to show that an IPS works by intentionally violating its rules, and the rule that I can't figure out how to violate is "block NetBIOS over TCP". Does anyone know how to do this? Is ...
6
votes
4answers
320 views
Has my network/computer been breached?
I'm not sure if this is the right site to ask, so I apologise if it isn't, but here goes.
A while ago I started noticing some odd behaviour. My Gmail account was compromised, it seemed, and I had to ...
3
votes
2answers
237 views
Why does layer 2 IDS seem underdeveloped compared to layer 3 IDS, for wireless network?
I understand that there are many applications such as Snort that do the job for network layer 3 IDS.
From what I have researched, layer 2 wireless IDS seems like a field that is very slow in ...
3
votes
1answer
259 views
Are Kismet (on OpenWRT) and Snort IDS (on a linux server) compatitble?
I'm trying to develop an IDS/IPS system project to include these elements:
A router running OpenWRT running Kismet drone (Attitude Adjustment 12.09rc1)
A Linux server (Running Kismet server + client)
...
0
votes
2answers
185 views
Easy way to analyse my netstats for intrusions?
I want to analyse my network traffic against intrusions or hackers. I looked at Snort but it seems difficult to install on Windows and overly complex anyway.
When I issue a netstat -a, I see various ...
1
vote
1answer
186 views
types of intrusions on host [closed]
I am implementing an IDS and just want to know that what are the possibilities with which the intrusion can occur.I am just doing a literature survey over the atacks possible so I want to know that ...
8
votes
2answers
162 views
Can you tell if an attack is successful by looking at IPS logs?
In my organization, we have an IPS behind a firewall. Each time a security event is triggered, I am left to wonder if the attack is really successful. For events that are set to drop in inline, we can ...
3
votes
2answers
1k views
When is it posible to sniff VPN traffic?
I have created a VPN service using Routing And Remote Services on Windows Server 2008 and I haven't configured any Server Network Policy yet. There is only one user for connecting to VPN and all of ...
4
votes
3answers
263 views
Information gathering before deploying a Network IPS
I understand that most NIPS these days have either rules or signatures built in to them and perhaps gathering information prior to deployment may help in fine-tuning the rules / signature once the IPS ...
10
votes
7answers
343 views
UNIX Servers: Possible intrusions or attacks that do not use any of the open listen sockets
What type of attacks are there that do not use open TCP or open UDP ports?
Is it safe to assume that no open ports means no remote access?
(Excluding the possibility that there is a badware already ...
9
votes
4answers
258 views
What free tools or techniques exist to discover anomalies in network flows?
I have been using FlowMatrix. What do others do on the cheap?
