Real-time detection and defense against malicious network activity and policy violations (exploits, port-scanners, advertising, telemetry, state surveillance, etc.)
-
Updated
May 21, 2024 - Python
Real-time detection and defense against malicious network activity and policy violations (exploits, port-scanners, advertising, telemetry, state surveillance, etc.)
wolfSSL Intrusion Detection and Prevention System (IDPS)
Real-time detection and defense against malicious network activity and policy violations (exploits, port-scanners, advertising, telemetry, state surveillance, etc.)
IDPS-ESCAPE (Intrusion Detection and Prevention Systems for Evading Supply Chain Attacks and Post-compromise Effects), part of the CyFORT project: open-source SOAR system powered by a dedicated ML-based anomaly detection toolbox (ADBox) integrated with open-source software such as Wazuh and Suricata.
A Linux based IDPS system configured with Snort Intrusion Detection System (IDS) and Syslog Next Generation for network monitoring, intrusion detection & prevention, as well as response in the form of real time alerts. For the purpose of this project, signature-based detection will be employed for the development of the system.
This Python script provides a sophisticated botnet detection system that leverages signature-based detection, machine learning algorithms, behavioral analysis, and traffic profiling to identify potential botnet activity in real-time. It also includes advanced alerting capabilities and integration with IP reputation services and SIEM for DETECTION!
Demonstrating Intrusion Detection and Prevention capabilities through Suricata IDPS.
Open Source S.O.C.
This project addresses cybersecurity in aviation by developing a machine learning-enhanced intrusion detection and prevention system (IDPS) for aircraft networks. Combining YARA-based signature detection with behavior-based (ML) anomaly detection, the system mitigates cyber threats in real-time, protecting aircraft from sophisticated attacks.
Add a description, image, and links to the idps topic page so that developers can more easily learn about it.
To associate your repository with the idps topic, visit your repo's landing page and select "manage topics."