Sieving techniques

Filters: IP's, ports, flags, etc.

Anti-spoofing:

• TCP
• Other

Recognition:

• Statistical Analysis
• Layers 3-7

High-level Protocols:

• HTTP specific (recognize anomalous behavior)
• Other

Previous slide

Next slide

Back to first slide

View graphic version