Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Focus-IDS
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

Re: Local Mirror Prevention with IDS

from [Kevin Johnson] Network Security [Permanent Link]
Subject: Re: Local Mirror Prevention with IDS
Date: Mon, 20 Dec 2004 21:03:27 -0500 
On Fri, 2004-12-17 at 07:38, Dimitrios Patsos wrote:

Hi!

Can anybody provide some help on how can we prevent a user from making a
local mirror of a web site by using both host & network IDS?

Thank you in advance.


Hi-

I am not sure that this would be possible in any usable way.  Off the
top of my head, the only way I could see doing this would be to alert on
any one requesting a certain number of pages within a specific time. 
BUT I think this would have two problems.  The first is that people or
web crawlers using the site could trigger it.  Second, all that someone
would need to do is pause long enough between requests and you would not
be able to differentiate between them and another normal user.  

The problem is, that to view a web page, it HAS to be transfered to the
client.

If you can give some more detail about what you would like to
accomplish, maybe we can come up with a solution that will work for your
issue.

Kevin
-------------------
BASE Project Lead
http://sourceforge.net/projects/secureideas
http://base.secureideas.net
The next step in IDS analysis!

Attachment: signature.asc
Description: This is a digitally signed message part

[More with this subject...]




<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  RE: help needed ..., Beauford, Jason
Next by Date:  RE: help needed ..., Khandelwal, Prashant
Previous by Thread:  Re: Local Mirror Prevention with IDS, Michal Melewski
Next by Thread:  Re: Local Mirror Prevention with IDS, Kevin
Indexes:  [Date] [Thread] [Top] [All Lists]