In which of the following IDS evasion techniques does an attacker deliver data in multiple small sized packets, which makes it very difficult for an IDS to detect the attack signatures of such…

Insertion is a technique where packets are crafted so the IDS accepts them but the end host rejects them - such as via invalid TTL values - causing the IDS to track a different byte stream than the target host processes.

Session splicing works by dividing the attack data into tiny TCP segments, each individually too small for the IDS to match against known attack signatures. The IDS must correctly reassemble the full TCP session stream to detect the attack, but many IDS implementations have resource or reassembly limits that prevent this. By keeping each packet fragment below the minimum signature length, the attacker bypasses signature-based detection entirely.

Fragmentation overlap involves sending fragments where the data in one fragment overlaps with data from a previous fragment, exploiting differences in reassembly logic between the IDS and the host.

Fragmentation overwrite is a specific variant of overlap where a later fragment deliberately overwrites data from an earlier fragment, causing the IDS and target host to reconstruct differing final payloads.