Theory – Advanced IDS Techniques

About Session

• • Customizing IDS rules
• • Advanced rules: sticky buffers/preprocessors and how they work
• • Asset identification
• • Optimizing rules: flowbits and datasets
• • Bypassing and evading IDS: tactics and defenses