From 37ff626e78149b4eb877b042672801b58d797100 Mon Sep 17 00:00:00 2001 From: Luca Date: Thu, 3 Feb 2022 09:17:54 +0100 Subject: Added new IDN/Punycode risk for spotting internationalized domain names --- doc/flow_risks.rst | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'doc') diff --git a/doc/flow_risks.rst b/doc/flow_risks.rst index 52e19212c..890347e02 100644 --- a/doc/flow_risks.rst +++ b/doc/flow_risks.rst @@ -253,3 +253,9 @@ The risk is set whenever a possible exploit (e.g. Log4J/Log4Shell) is detected. NDPI_TLS_CERTIFICATE_ABOUT_TO_EXPIRE =================================== The risk is set whenever a TLS certificate is close to the expiration date. + +.. _Risk 042: + +NDPI_PUNYCODE_IDN +=================================== +The risk is set whenever a domain name is specified in IDN format -- cgit v1.2.3