Packet/Protocol Anomaly Detection with IDS

[Harald "Frlinger" <brain () paranoit at>]

Hi Community,

im a student, and at the moment im searching
for some input to write my exam.

The title is "Packet/Protocol Anomaly Detection with IDS", i already got some good input.
But some things are quiet hard to find.

What i need is some examples on attacks, 
on specific protocols, like ftp, http, tcp ...
I know there are attacks like Dos or Buffer Overflows.
But i need some more.

Maybe you can tell me some good ressources or
examples.

Thanks all, and sorry for my english.


mfg
harry

--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from 
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
--------------------------------------------------------------------------