Advanced Evasion of IDS Buffer Overflow Detection
Jeru explores advanced evasion of ids buffer overflow detection at DEF CON 8, examining firewalls and practical defenses.
Summary
Architecture and Background
Jeru - Advanced evasion of IDS buffer overflow detection This is a technical talk which assumes the audience understands x86 or SPARC assembly, and buffer overflow methodologies.
Vulnerability Analysis
It presents various stealth coding techniques that can be applied to preventing detection by most current generation IDSs.
Exploitation and Demonstrations
The talk also includes a live demonstration of exploits written to evade IDS detection, source code of the examples included.
Remediation and Defensive Strategies
A paper documenting the techniques, and sample code will be available from after the presentation. jeru is a member of New Hack City, a hacker collective based in San Francisco. He has worked in digital design, and embedded programming. He currently spends his time as part of an IDS development team, providing application level security assessment, and pickin' his fro.
Related talks
Main Stage·4 min
Thomas J. Munn
Thomas J. Munn examines thomas Munn - Need for home-based firewalls.
Main Stage·49 min
Robert Graham
Robert Graham explores evading network-based intrusion detection systems at DEF CON 8, examining firewalls and practical defenses.
Main Stage·27 min
Ian Vitek
Ian Vitek - IP-spoofing and source routing connections with Linux 2.