IDS Test 1 � Attack Recognition

Attacks

Detected

Port scans

5

5

Denial of Service�

11

8

DDOS/Trojan

n/a

n/a

Web

1

1

FTP

1

1

SMTP

n/a

n/a

POP3

n/a

n/a

ICMP

n/a

n/a

Finger

n/a

n/a

Total

18

15

IDS Test 2 - Performance Under Load

0%

25%

50%

75%

100%

Small (64 byte) packet test (max 148,000pps)

n/a¹

n/a¹

n/a¹

n/a¹

n/a¹

�Real world� packet test (max 57,000pps)

n/a

n/a

n/a

n/a

n/a

Large (1514 byte) packet test (max 8176pps)

n/a

n/a

n/a

n/a

n/a

IDS Test 3 - IDS Evasion Techniques

Attacks

Detected

Fragrouter

8

0

Whisker�

7

0

Total

15

0

IDS Test 4 - Stateful Operation

Attacks

Vulnerable?

Stick

n/a

n/a

Snot�

n/a

n/a

Notes:

1.�� Accurate attack detection counts were not possible

2.�� Centrax was not re-tested for Edition 2, therefore a complete set of test results are not available. Tests that were not included in Edition 1 are marked as �n/a�

�

With no individual attack count capability we found it impossible to provide accurate detection counts for our high-volume boping attacks. However, we did note that all recognisable attacks appeared to be detected up to the 75 per cent network load point. Detection was erratic at 100 per cent load.

The Centrax Network Agent did not provide any packet reassembly capabilities or defence against the Whisker IDS evasion techniques, and it missed a few common attacks, since at the moment it could not be considered to have a �full� signature library. This is not really to the product�s detriment given that its main focus at present is on host-based intrusion detection, and that the network Agent is a relatively new development and could be considered more as a �bonus� inclusion in an excellent Host IDS system. We certainly would not recommend purchase of Centrax for the Network IDS component alone.

Please note that at the time of writing the future of the Centrax product is uncertain given that CyberSafe appears to be in some �financial difficulty�.

Click here to return to the CyberSafe Centrax Review
Click here to return to the CyberSafe Centrax Questionnaire
Click here to return to the IDS Index Section

Send mail to webmaster with questions or�
comments about this web site.
Copyright � 1991-2002 The NSS Group.
All rights reserved.