First page Back Continue Last page Overview Graphics
Counter Evasion
IP Normalization
Application proxy
IDS Normalization Modules
Count on laziness!
Less effective as we add on layers to traditional OSI (SOAP over HTTP, AJAX, etc).
Notes:
IP Normalization – Often done by firewalls to limit IP layer fragmentation, TTL and window issues.
Application Proxies: Cisco Content Switching Module, Squid Proxy
IDS Normalization: Stream4, etc.