SecurityFocus

Re: Intrusion Detection Evaluation Datasets Mar 13 2009 02:47AM
Sam Gorton (sam gorton gmail com) (3 replies)

Re: Exploit-based signature is dead, or not? Mar 18 2009 02:18PM
tanyoo10 (tanyoo10 163 com)

Exploit-based signature is dead, or not? Mar 13 2009 05:20PM
tanyoo10 (tanyoo10 163 com) (4 replies)

Re: Exploit-based signature is dead, or not? Mar 29 2009 01:11AM
Joel Esler (eslerj gmail com)

Re: Re: Exploit-based signature is dead, or not? Mar 17 2009 06:52AM
tanyoo10 (tanyoo10 163 com)

Hi Sergio 'shadown' Alvarez£¬

>just in case you didn't realize...if you have the exploit to generate

>the signature, you already know what the vulnerability is.

Exploit-based signatures are usually generated by finding the artifacts in a number of exploit samples. Thus, having exploit-based signature does't mean that we already know the vulnerability.

cheers,

Yong

[ reply ]

RE: Exploit-based signature is dead, or not? Mar 16 2009 08:27PM
Addepalli Srini-B22160 (saddepalli freescale com)

Re: Exploit-based signature is dead, or not? Mar 16 2009 06:16PM
Sergio 'shadown' Alvarez (shadown gmail com) (1 replies)

Re: Exploit-based signature is dead, or not? Mar 17 2009 03:12AM
Jackie Lai (gclai draytek com)

Re: Intrusion Detection Evaluation Datasets Mar 13 2009 02:56PM
Raffael Marty (rmarty splunk com)