Tudor Damian works as an IT consultant and tech support specialist. With more than 10 years of experience in managing complex IT infrastructures, he is a Certified Ethical Hacker, a Microsoft MVP and a technical speaker at local and regional community events. Tudor often talks about the latest technologies and trends with themes including general networking & security, virtualization technologies, OS deployment and maintenance, social engineering and information security awareness, web application security, white-hat hacking and penetration testing techniques. He is also an organizer for the ITCamp conference in Romania. His day to day activities cover designing and implementing IT solutions, performing tech support and maintenance work, and delivering training sessions for experts and beginners alike.

http://ro.linkedin.com/in/tudydamian
http://twitter.com/tudydamian

IDS Evasion Techniques

There is no doubt that Intrusion Detection Systems should be incorporated into any security
infrastructure, however today’s IDS implementations are far from perfect. Security Managers should continue to add layers to their defense strategy and not place too much reliance on this technology, as it’s not easy to create a system that can effectively flag an attack without crashing under the weight of its own logs, operate relatively maintenance free and respond appropriately to benign anomalous events without raising too many
false alarms.

This session discusses some of the most common techniques meant to evade IDS detection order to easily attack the infrastructure sitting behind those systems.