Hands-on Cybersecurity Studies: Intrusion Detection System Evasion Mitigation with Themis

Author(s):

Jonathan Martinez and Jaime C. Acosta

Abstract:

This report introduces a hands-on cybersecurity exercise that is meant to be completed by participants. The participants leverage practical techniques, specifically focusing on intrusion detection system (IDS) evasion tactics and network monitoring tools, to simulate a Shellshock attack to enhance their capacity to detect and mitigate cybersecurity risks, thereby fortifying their defenses against evolving threats in the digital landscape. Through hands-on engagement, attendees develop proficiency in recognizing and implementing diverse evasion strategies utilized by attackers to circumvent IDSs. Essential tools like TCPDump, Zeek (previously Bro), and Robust Zeek (Themis) are employed for traffic analysis, anomaly detection, and threat identification.