RE: sip attacks signitures and IDs's

["M. Shirk" <shirkdog_list () hotmail com>]

Enterasys Dragon 7.2 includes a Protocol Decoder that detects invalid SIP 
messages. The signature language has also been enhanced in 7.2.

Shirkdog
http://www.shirkdog.us




> From: Juan B <juanbabi () yahoo com>
> To: security basics <security-basics () securityfocus com>
> Subject: sip attacks signitures and IDs's
> Date: Sat, 21 Jan 2006 07:02:13 -0800 (PST)
>
> Hi,
>
> Im am looking to implement an Ids and beacuse my
> network  includes Voip traffic (sip) I want to
> implenet an IDS which is aware of sip attacks is there
> such an IDS? I saw that snort has one signiture
> relates to Sip which is EXPLOIT Ethereal SIP UDP CSeq
> overflow attempt.
>
> except snort does any commercial IDS has signiturs to
> detect Sip related attacks?
>
> Thanks very much,
>
> Juan
>
> __________________________________________________
> Do You Yahoo!?
> Tired of spam?  Yahoo! Mail has the best spam protection around
> http://mail.yahoo.com
>
> ---------------------------------------------------------------------------
> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> The Norwich University program offers unparalleled Infosec management
> education and the case study affords you unmatched consulting experience.
> Tailor your education to your own professional goals with degree
> customizations including Emergency Management, Business Continuity 
> Planning,
> Computer Emergency Response Teams, and Digital Investigations.
>
> http://www.msia.norwich.edu/secfocus
> ---------------------------------------------------------------------------

_________________________________________________________________
Don’t just search. Find. Check out the new MSN Search! 
http://search.msn.click-url.com/go/onm00200636ave/direct/01/


---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------