Advanced evasion techniques
Steve C. Gold · Network Security · 2011
Much has been made in recent months of so-called Advanced Evasion Techniques (AETs) that could be used by hackers and cyber-criminals to bypass IT security defences. Do the claims stand up to technical scrutiny? Steve Gold investigates and discovers that AETs may not be as new as some experts claim. The basic techniques were outlined 12 years ago but the technology wasn't available then to exploit them. Now that we have sufficiently powerful computers to mount such attacks, they are easily thwarted by the proper implementation of intrusion detection and prevention systems – provided these are properly configured. The main danger is that budget constraints might undermine attempts at protection.