Behavior anomaly IDS attacks

["Drew Simonis" <simonis () myself com>]

Hello,
Some time ago, I read an interesting bit of research proposing an 
attack against a behavior baseline/anomaly IDS system that slowly
altered traffic with the intent of incorporating the attack into
the baseline.  I wonder if anyone here might have also read that 
and would be familiar with the title.  I've lost it.  

TIA,
-Ds
-- 
___________________________________________________________
Sign-up for Ads Free at Mail.com
http://promo.mail.com/adsfreejump.htm


--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
--------------------------------------------------------------------------