IPS Signature Database Update
| Name | ips.sig | |||
| Version | 3.0.319, 3.1.319 | |||
| StoneOS | Firewall 5.5R8P2 or above, and NIPS/IDS 5.5R5-3.5 or above, and BDS 5.5R8-3.3 or above | |||
| Release Date | 2026-08-10 | |||
| XSS/SQL Injection Attack Engine Version | 1.260607 | |||
| XSS/SQL Injection Attack Engine Change Description | Update the detection model, optimize datasets and model parameters, and improve detection performance | |||
| New Signature (2001) |
Rule ID | Rule Name | StoneOS | Detail |
| 345327 | Adobe Flash Player TextField MaxChars Setter Use After Free Vulnerability (CVE-2015-8426) | 5.0R4 or above | click for more information | |
| 107939 | APT-C-20/APT28 APT Domain Observed | 5.0R4 or above | click for more information | |
| 107670 | Worm Activity: Sality DNS Lookup | 5.0R4 or above | click for more information | |
| 108407 | APT-C-55/Kimsuki APT Domain Observed | 5.0R4 or above | click for more information | |
| 107868 | Ransomware Activity: Ransomware/Locky Onion Domain Lookup | 5.0R4 or above | click for more information | |
| 107527 | APT-C-51/APT35 APT Domain Observed | 5.0R4 or above | click for more information | |
| 108256 | Trojan Activity: Skeeyah CnC Domain in DNS Lookup | 5.0R4 or above | click for more information | |
| 107116 | Trojan Activity: Androm CnC Domain in DNS Lookup | 5.0R4 or above | click for more information | |
| 107725 | Trojan Activity: Webshell CnC Domain in DNS Lookup | 5.0R4 or above | click for more information | |
| 107312 | Mining Activity[Multi Currency]: Coinminer CnC DNS Lookup | 5.0R4 or above | click for more information | |
| 108462 | Trojan Activity: Emotet CnC Domain in DNS Lookup | 5.0R4 or above | click for more information | |
| 107037 | APT-C-26/Lazarus APT Domain Observed | 5.0R4 or above | click for more information | |
| 108171 | Trojan Activity: Emotet CnC Domain in DNS Lookup | 5.0R4 or above | click for more information | |
| 107774 | Trojan Activity: Remcos CnC Domain in DNS Lookup | 5.0R4 or above | click for more information | |
| 107169 | Trojan Activity: Quasar CnC Domain in DNS Lookup | 5.0R4 or above | click for more information | |
| 108383 | Mining Activity[Multi Currency]: public_miner_pool Mining Pool DNS Lookup | 5.0R4 or above | click for more information | |
| 106894 | APT-C-51/APT35 APT Domain Observed | 5.0R4 or above | click for more information | |
| 107940 | APT-C-01 APT Domain Observed | 5.0R4 or above | click for more information | |
| 107631 | Trojan Activity: Vertexnet CnC Domain in DNS Lookup | 5.0R4 or above | click for more information | |
| 108232 | Ransomware Activity: Ransomware/Ransom Onion Domain Lookup | 5.0R4 or above | click for more information | |
| ...... | ||||
| Updated Signature (55) |
Rule ID | Rule Name | StoneOS | Detail |
| 334841 | Cross-site Scripting Detection - In URI 24 | 5.0R4 or above | Click here for more information | |
| 336844 | SQL Injection Detection - Error Based Injection 1 | 5.0R4 or above | Click here for more information | |
| 334893 | SQL Injection Detection - Boolean Injection 9 | 5.5R5 or above | Click here for more information | |
| 337248 | Cross-site Scripting Detection - In URI 155 | 5.0R4 or above | Click here for more information | |
| 334986 | SQL Injection Detection - Error Based Injection 9 | 5.5R5 or above | Click here for more information | |
| 306369 | Directory Traversal Detection - Sensitive File Access | 5.0R4 or above | Click here for more information | |
| 334910 | SQL Injection Detection - SELECT Injection 3 | 5.5R5 or above | Click here for more information | |
| 334864 | SQL Injection Detection - UNION SELECT 13 | 5.5R5 or above | Click here for more information | |
| 336861 | SQL Injection Detection - Error Based Injection 10 | 5.5R5 or above | Click here for more information | |
| 306960 | Directory Traversal Detection | 5.0R4 or above | Click here for more information | |
| 334906 | SQL Injection Detection - Access to Sensitive Information 8 | 5.5R5 or above | Click here for more information | |
| 337732 | Suspicious JSP File Upload Detection | 5.0R4 or above | Click here for more information | |
| 334778 | Cross-site Scripting Detection - Dangerous Function 2 | 5.5R5 or above | Click here for more information | |
| 334671 | Cross-site Scripting Detection - In URI 11 | 5.5R5 or above | Click here for more information | |
| 334466 | Directory Traversal Detection - In URI 4 | 5.5R5 or above | Click here for more information | |
| 334937 | SQL Injection Detection - SELECT Injection 11 | 5.5R5 or above | Click here for more information | |
| 334892 | SQL Injection Detection - Boolean Injection 8 | 5.5R5 or above | Click here for more information | |
| 336950 | SQL Injection Detection - UNION SELECT 1 | 5.5R5 or above | Click here for more information | |
| 334477 | Directory Traversal Detection - In URI 9 | 5.5R5 or above | Click here for more information | |
| 334871 | SQL Injection Detection - CASE WHEN Injection 2 | 5.5R5 or above | Click here for more information | |
| ...... | ||||