Port/Host Scanning Techniques

["Tarek Amr Abdullah" <tabdullah () salec com eg>]

Hi there

Does anyone know the current techniques used in IDSs in order to detect
Host Scanning and Port Scanning? I think it is something related to
traffic / protocol anomaly. But does anyone know more details about the
implementation.

Thanks in advance


---------------------------------------------------------------------------
---------------------------------------------------------------------------