RFC 3514:The Security Flag in the IPv4 Header
RFC-Ref

Intrusion Detection System


Click on the red underlined text to get to the source

... Firewalls [CBR03], packet filters, intrusion detection systems, and the like often have difficulty distinguishing between packets that have malicious intent and those that are merely unusual. The problem ...


... hosts scan other hosts in a fashion that can alert intrusion detection systems. If the scanning is part of a benign research project, the evil bit MUST NOT be set. If the scanning per se is ...
... innocent, but the ultimate intent is evil and the destination site has such an intrusion detection system, the evil bit SHOULD be set. ...


... MIB variable. Intrusion detection systems (IDSs) have a harder problem. Because of their known propensity for false negatives and false positives, IDSs ...



Google
Web
RFC-Ref