How does an evasion work?
Evasion techniques disguise and/or modify cyber attacks to avoid detection and blocking by information security systems. A good analogy is a system designed to recognize keywords in speech patterns on a phone system, such as “terrorist plot”. A simple evasion would be to use a language other than English, but which both parties can still understand. However, most systems compensate for this tactic and can still provide protection. In the same analogy, advanced evasion techniques use a combination of languages. Since there are several hundred languages in use in the world today, that represents a significantly larger possible set of combinations that must be matched to protect the asset. In this, most systems today fail.
