Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista
Focus on IDS
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re: Single and Double flux DNS activity detection and prevention May 07 2008 04:41AM
john lokka (merigoth gmail com)
I deal in IDS'es more than IPSes. So, I feel the domain blocks would
be better suited for the dns server rather than the IPS. Although I
imagine they could work equally well on an IPS. Still, I don't know if
there are generic signature detection of fast-flux networks for
IDS/IPS systems.

I attende...

[ more ]  




 

Privacy Statement
Copyright 2007, SecurityFocus