Intrusion-detection Libraries

8 Components & Libraries

Sortby

Intrusion-detection Libraries

Daemon to ban hosts that cause multiple authentication errors

Though Fail2Ban is able to reduce the rate of incorrect authentication attempts, it cannot eliminate the risk presented by weak authentication. Set up services to use only two factor, or public/priva…

Malicious traffic detection system

The following (black)lists (i.e. feeds) are being utilized: As of static entries, the trails for the following malicious entities (e.g. malware C&Cs or sinkholes) have been manually included (fro…

Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.

Acra — database security suite for sensitive and personal data protection. Acra gives you tools for encrypting each sensitive data record (data field, database cell, json) before storing them in the …

Slips, a free software behavioral Python intrusion prevention system (IDS/IPS) that uses machine learning to detect malicious behaviors in the network traffic. Stratosphere Laboratory, AIC, FEL, CVUT in Prague.

Slips is a powerful endpoint behavioral intrusion prevention and detection system that uses machine learning to detect malicious behaviors in network traffic. Slips can work with network traffic in r…

Scirius is a web application for Suricata ruleset management and threat hunting.

Scirius Community Edition is a web interface dedicated to Suricata ruleset management. It handles the rules file and update associated files. Scirius will take care of refreshing the sources and comp…

Machine Learning for Network Intrusion Detection & Misc Cyber Security Utilities

This tool parses log data and allows to define analysis pipelines for anomaly detection. It was designed to run the analysis with limited resources and lowest possible permissions to make it suitable for production server use.

This tool parses log data and allows to define analysis pipelines for anomaly detection. It was designed to run the analysis with limited resources and lowest possible permissions to make it suitable…