IDS mailing list archives
Re: Worm attack generation tools
From: Joey Peloquin <joeyp () cotse net>
Date: Fri, 18 Aug 2006 07:49:48 -0500
miaomitiff119 wrote:
Hi,:) Does anyone know any tools which can be used to simulate attack traffic (especially traffic pattern of worm attacks)? It is for the purpose of testing IDSs. I've looked at PACKIT and Netcat, but they can't generate "simultaneous" connections which is required for generating worm spreading behaviour...(or are there any ways to use PACKIT or Netcat to generate simultaneous connections?) Many thanks!:)
Assuming you're wanting to test detections versus connections per second, you might try Tomahawk. We used it for testing NIPS, but I don't see why you couldn't use it for IDS as well. http://tomahawk.sourceforge.net/ It's been discussed on this list before, ad nauseam, but keep in mind, ICSALabs rewrote most of the code for their certification program (v1.1), so it shouldn't be considered a TippingPoint-leaning tool, as it has in the past. -jp ------------------------------------------------------------------------ Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more. ------------------------------------------------------------------------
Current thread:
- Worm attack generation tools miaomitiff119 (Aug 17)
- Re: Worm attack generation tools Stefano Zanero (Aug 18)
- Re: Worm attack generation tools Joey Peloquin (Aug 18)
- RE: Worm attack generation tools Robert D. Holtz (Aug 21)
- Re: Worm attack generation tools Joey Peloquin (Aug 21)
- RE: Worm attack generation tools Robert D. Holtz (Aug 21)
- Re: Worm attack generation tools Joey Peloquin (Aug 21)
- RE: Worm attack generation tools Robert D. Holtz (Aug 21)
- RE: Worm attack generation tools Tony Haywood (Aug 24)
- RE: Worm attack generation tools Robert D. Holtz (Aug 21)
- <Possible follow-ups>
- Re: Worm attack generation tools whonosewho (Aug 21)