Friday, January 8, 2010

Tools for testing IDS

1. RACOON - RACOON: Rapidly Generating User Command Data For Anomaly Detection From Customizable Templates (http://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=01377229)
2. fTester - (http://dev.inversepath.com/trac/ftester) Firewall and IDS Testing tool
3. Tcpreplay - network traffic testing (http://tcpreplay.synfin.net/trac/)
4. Nemesis - well suited for testing Network Intrusion Detection Systems, firewalls, IP stacks and a variety of other tasks (http://nemesis.sourceforge.net/)
5. IDSwakeup - IDSwakeup is to generate false attack that mimic well known ones, in order to see if NIDS detects them and generates false positives
6. Unix tool EXPECT - Simulation of “normal” and “intruder” behaviour.
Extends TCL interpreter to provide simulation scripts. (http://expect.nist.gov/)
7. Fragrouter: Routes network traffic such that it elude most NIDS. (http://www.securityfocus.com/tools/176)

No comments:

Post a Comment