HIDS 67128

From Atomicorp Wiki
Jump to: navigation, search

This rule detects when an XML message or post has been sent to the server, and is so badly formated that the XML library can not parse it. There are a number of known attacks on XML parser libraries that send badly formated XML messages or posts and this rule detects when this occurs.

Personal tools