Snort mailing list archives
Re: Can snort detect covert channels?
From: Jeff Kell <jeff-kell () utc edu>
Date: Sun, 04 Oct 2009 13:31:24 -0400
Well, if it could detect them, they wouldn't be "covert" now, would they? :-) It does however detect a number of "esoteric" channels, provided the signatures for them. In fact, a "large number" of signatures focus on such traffic for malware detection. Granted it is a reactive response at that point, but the focus is on detection (IDS) rather than prevention (IPS). Jeff ------------------------------------------------------------------------------ Come build with us! The BlackBerry® Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9-12, 2009. Register now! http://p.sf.net/sfu/devconf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Can snort detect covert channels? Mouza Al-Nayeli (Oct 04)
- Re: Can snort detect covert channels? Nigel Houghton (Oct 04)
- Re: Can snort detect covert channels? Mouza Al-Nayeli (Oct 04)
- Re: Can snort detect covert channels? Richard Bejtlich (Oct 04)
- Re: Can snort detect covert channels? Mouza Al-Nayeli (Oct 04)
- Re: Can snort detect covert channels? Richard Bejtlich (Oct 04)
- Message not available
- Re: Can snort detect covert channels? Richard Bejtlich (Oct 04)
- Re: Can snort detect covert channels? Mouza Al-Nayeli (Oct 04)
- Re: Can snort detect covert channels? Jeff Kell (Oct 04)
- Re: Can snort detect covert channels? Mouza Al-Nayeli (Oct 04)
- Re: Can snort detect covert channels? Nigel Houghton (Oct 04)
- <Possible follow-ups>
- Re: Can snort detect covert channels? Mouza Al-Nayeli (Oct 04)
- Re: Can snort detect covert channels? Richard Bejtlich (Oct 04)