Slow Scan HoneyNet Detection Via Time Stamp Enumeration
Talkback IF you make time spaced network scans for the time stamps you can cross corelate them to show which have independant time stamps in their delta functions (that is change rate not absolut values). So your experianced attacker will take his day zero...
[December 1, 2006, 19:45]
