Advanced evasion of IDS buffer overflow detection

Referenten: Jeru

Sprache: englisch

Dokumentation: http://www.defcon.org/html/defcon-8-pre.html#jeru

Raum:

Tag:

TAG2

Beschreibung:

This is a technical talk which assumes the audience understands x86 assembly, and buffer overflow methodologies. It presents various stealth coding techniques that can be applied to preventing detection by most current generation IDSs.

The talk also includes a live demonstration of exploits written to evade IDS detection, source code of the examples included. A paper documenting the techniques, and sample code will be available from http://www.newhackcity.net after the presentation.