Cyber Risks · Cisco Talos

Some Facts About Advanced Evasion Techniques

Summary: Stonesoft announced Advanced Evasion Techniques in an October 4 press release and reported them to CERT-FI, which shared full details with Sourcefire; Sourcefire's in-house testing found Snort handled all of the reported AETs. Stonesoft then issued a second press release alongside an ICSA Labs release and launched antievasion.com, and former NSS Labs CEO Bob Walder concluded the techniques were a re-hashing of evasion methods standard in the IDS/IPS industry for 7+ years.

What you should know: The vendor making the loudest claim about AET protection, Stonesoft, failed the evasions portion of the 2009 NSS Labs test - so a security leader weighing evasion coverage should check a product's independent test record rather than its press release.

Read the original at Cisco Talos ↗

Topics
Malware
Related