IDS mailing list archives
Re: A Neural Network to detect polymorphic shellcodes
From: "Jason Muskat, GCUX, VE3TSJ" <Jason () TechDude Ca>
Date: Wed, 23 Aug 2006 23:34:45 -0400
Hello, I originally created a tool that identified HTTP attacks using finite state machines and Forward Analysis. In later versions, I had incorporated fuzzy HTTP request analysis. Look for strings and evasions. In this case fuzz shell names, exec*() calls and APIs, kernel execution gates (Linux and such), and such. Regards, -- Jason Muskat | GCUX - de VE3TSJ ____________________________ TechDude e. Jason () TechDude Ca m. 416 .414 .9934 http://TechDude.Ca/
From: <mimanium () hotmail com> Date: 23 Jul 2006 14:00:27 -0000 To: <focus-ids () securityfocus com> Subject: A Neural Network to detect polymorphic shellcodes Hello, I am loking for project that implement Neural Networks and spectrum analysis to detect polymorphic shellcodes such as those of ADMutate. Please if you have any links or if your ever workd on such projects I need your help! I especialy need to know what could be the imputs of the Neural Network and how I can train it. Regards, ------------------------------------------------------------------------ Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more. ------------------------------------------------------------------------
------------------------------------------------------------------------ Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more. ------------------------------------------------------------------------
Current thread:
- Re: A Neural Network to detect polymorphic shellcodes Stefano Zanero (Aug 17)
- Re: A Neural Network to detect polymorphic shellcodes Michael Vergoz (Aug 18)
- <Possible follow-ups>
- Re: A Neural Network to detect polymorphic shellcodes Jason Muskat, GCUX, VE3TSJ (Aug 24)