IPS detection and plausible deniability

[Robin Wood <robin () digininja org>]

I'm interested in two IPS detection techniques and looking for papers
or tools on both.

The first  is something like WafW00f from Sandro Gauci. Something that
will fire loads of traffic against a network and see what happens then
determine what, if anything, is in place based on the results.

The second is anything about a tool that will maybe just detect there
is an IPS in place but the traffic it generates could be explained as
legitimate traffic so allow plausible deniability.

Anyone got anything?

Robin
_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com