There are a variety of techniques which attackers are making use of, the following are deemed 'very simple' measures which may be taken to evade IDS: An IDS will work by seeking deviations from regular exercise and regarded attack signatures. Anomalous designs are sent up the stack and examined at protocol and software layers. It may detect situ