Any threat that sneaks past your legacy IDS leaves your organization open to risk, so employing more advanced detection methods to identify them is vital to the safety of your organization. Don’t be fooled by the weakness or subtlety of these attack signals – their impact can be anything but weak or subtle.

In this paper we explore four types of network activity that your legacy IDS will likely miss which – if detected – can provide early warning of a cyber attack. For each, we describe the mechanisms used by modern IDS alternatives to detect them.