Overview of the Evasion Resilience Testing Technology for Network Based Intrusion Protecting Devices

摘要

With the rapid development of information security technology, Network Based Intrusion Protecting Devices(NIPD), like firewall and NIDS, holding the function of detecting and blocking network attacks, have become the primary security guard of critical information infrastructure, significantly reduced the security threat of network attack. Regarding these features, attackers are continuously pursuing efficient ways for obfuscating attack behaviors to evade from the detecting mechanism of NIPD. Once the NIPD deployed in the network boundary is found vulnerable, malicious attackers can bypass it with advanced evasion technology to deliver an exploit, making the protected network information infrastructure be directly exposure to network threats from outside, which brings in security risks and results in serious consequence. So doing research on the testing technology for the evasion resilience capability of NIPD is critical. This paper first introduced the working mechanism of NIPD, providing a comprehensive survey on the achievements on the field of current evasion resilience testing technology. Then, the defects of the current work are analyzed and improvements on the corresponding work are described accordingly. Finally, the further research directions in this field is discussed in detail.