Intrusion Detection System Evasion durch Angriffsverschleierung in Exploiting Frameworks

An increased protection requirement for IT systems can be ensured through security measures such as firewalls, intrusion detection systems, or intrusion prevention systems (IDS/IPS), which are designed to block certain types of traffic or detect and prevent attacks. An example of an attack is exploiting a vulnerability through an exploit with the aim of executing one's own code and gaining control over the IT system. Exploiting frameworks serve as a kind of toolkit for such attacks, allowing an attacker to customize the exploit and automate its execution against a target system. However, many attacks are detected by protective measures such as IDS or, in the case of intrusion prevention systems (IPS), are thwarted. To prevent the detection of such attacks, several combinable techniques exist, each based on different layers of the ISO OSI model.