Showing posts with label Intrusion Detection. Show all posts
Showing posts with label Intrusion Detection. Show all posts

Wednesday, July 30, 2008

LaBrea: "Sticky" Honeypot and IDS


"LaBrea takes over unused IP addresses, and creates virtual servers that are attractive to worms, hackers, and other denizens of the Internet. The program answers connection attempts in such a way that the machine at the other end gets "stuck", sometimes for a very long time." read more...

Website: http://labrea.sourceforge.net

Sunday, July 27, 2008

Kismet: Wireless Packet Analyzer


"Kismet is an 802.11 layer2 wireless network detector, sniffer, and intrusion detection system. Kismet will work with any wireless card which supports raw monitoring (rfmon) mode, and can sniff 802.11b, 802.11a, and 802.11g traffic. Kismet identifies networks by passively collecting packets and detecting standard named networks, detecting (and given time, decloaking) hidden networks, and infering the presence of nonbeaconing networks via data traffic." read more...

Website: http://www.kismetwireless.net

Monday, July 21, 2008

OSSEC: An Open Source Host-based Intrusion Detection System


"OSSEC is a scalable, multi-platform, open source Host-based Intrusion Detection System (HIDS). It has a powerful correlation and analysis engine, integrating log analysis, file integrity checking, Windows registry monitoring, centralized policy enforcement, rootkit detection, real-time alerting and active response. It runs on most operating systems, including Linux, OpenBSD, FreeBSD, MacOS, Solaris and Windows. A list with all supported platforms is available here." read more...



Thursday, July 17, 2008

Snort - An Intrusion Detection/Prevention System


"SNORT® is an open source network intrusion prevention and detection system utilizing a rule-driven language, which combines the benefits of signature, protocol and anomaly based inspection methods. With millions of downloads to date, Snort is the most widely deployed intrusion detection and prevention technology worldwide and has become the de facto standard for the industry." read more...

Download: http://www.snort.org/dl/