174 matches found
network-attack-detection
Network Attack Detection using Machine Learning Description This project leverages machine learning techniques to classify network attacks such as Port Scanning, Denial of Service DoS, and malware. The input data is in the Netflow V9 format, which is a standard format used by Cisco. The...
OSTE-Web-Log-Analyzer
OSTE-Web-Log-Analyzer Automate the process of analyzing web server logs with the Python Web Log Analyzer. This powerful tool is designed to enhance security by identifying and detecting various types of cyber attacks within your server logs. Stay ahead of potential threats with features that...
WhiteBeam
Transparent endpoint security Features Block and detect advanced attacks Modern audited cryptography: RustCrypto for hashing and encryption Highly compatible: Development focused on all platforms incl. legacy and architectures Source available: Audits welcome Reviewed by security researchers with...
Network-Analysis-Tools
Pcap Capture File Analysis Toolv.1 !CONTACT! | Email: [email protected] | | Github: github/azizaltuntas | | Twitter: @esccopyright | Features 1-Top 10 Visited Sites 2-Emails 3-All Request Urls 4-User-Agents List 5-String Grep Mode 6-Connection details 7-Ports Used 8-ALL Ip List 9-Manuel Pack...
wireless-ids
Wireless IDS Intrusion Detection System Wireless IDS is an open source tool written in Python and work on Linux environment. This tool will sniff your surrounding air traffic for suspicious activities such as WEP/WPA/WPS attacking packets. It do the following Detect mass deauthentication sent to...
dvwassl
SSL-enabled Damn Vulnerable Web App Run an SSL-enabled Damn Vulnerable Web App. Why? You might want to test web attack detections over SSL. Build the image docker build -t dvwassl:latest . Run the container docker run -d -p 443:443 dvwassl:latest Custom SSL certificate and key The image comes wit...
fail2ban-log4j
fail2ban-log4j fail2ban filter that catches attacks against log4j CVE-2021-44228 Installation Copy this file to your fail2ban filter.d directory, which is usually something like /etc/fail2ban/filter.d or similar. Add an apache-jndi section to your jail.local or jail.conf: apache-jndi enabled = tr...
Honeypot-Project
OWASP Honeypot-Project The goal of the OWASP Honeypot Project is to identify emerging attacks against web applications and report them to the community, in order to facilitate protection against such targeted attacks. Based around the earlier OWASP/WASC Distributed Web Honeypots Project...
API-attack-detection-with-AI
Detection of SQL/XSS Attacks on Web API with Artificial Intelligence / Machine Learning This project aims to detect SQL and XSS injections in API requests/params using machine learning. Project Overview This project aims to detect SQL and XSS injections in API requests and parameters using Machin...
modsecurity-cve-2018-6389
modsecurity-cve-2018-6389 A ModSecurity ruleset for detecting potential attacks using CVE-2018-6389. For more information, see https://www.rastating.com/protecting-wordpress-against-cve-2018-6389/...
agentic-pcap
Agentic LLMs for Network Attack Detection Can a tool-using LLM agent independently investigate a raw network capture and identify an attack? Which packet-analysis queries will it choose, and can it remain effective when the same traffic is surrounded by much more background activity? This project...
Covert System Identification under Timing Constraints: A Static Linear Model and Its Detectability Implications
This paper studies covert system identification in cyber-physical systems, where an attacker infers plant dynamics while attempting to remain stealthy. We introduce a lightweight static linear model in which the time to execute a setpoint change is proportional to the commanded speed difference. ...
DeepChronos: Temporal Neuro-Symbolic Reasoning for Multi-Step Attack Detection
Modern cyber threats commonly unfold as multi-step attacks comprising temporally and causally related phases. Current defenses commonly follow a detect first and correlate later paradigm. Intrusion detection systems classify events independently, while downstream systems reconstruct attack...
Interpretable Cyber-Physical Attack Detection in Smart Grids: A Leakage-Controlled Multi-Testbed Evaluation of Fusion, Robustness, and Observability Limits
Cyber-physical smart-grid detectors are typically treated as black boxes and validated exclusively on clean, temporally shuffled datasets, which risk overly optimistic performance claims. This work presents a multi-testbed evaluation study built around an interpretable, time-windowed fusion Rando...
Detecting Generated-Depth Injection Attacks on RGB-D Place Authentication
Advances in monocular depth estimation MDE now let an attacker generate depth from publicly available RGB images and submit forged RGB-D queries. Such attacks break a core assumption of RGB-D place authentication: that depth comes from a sensor. We study a presentation attack detection PAD...
miniSIEM
一个ai搭建的 轻量级、可一键部署 的迷你 SIEM（安全信息与事件管理）系统：把分散在 Linux/Windows 主机上的日志集中采集起来，用规则引擎自动识别暴力破解、SQL 注入、目录扫描、异常登录等攻击行为，聚合成告警，并用攻击地图和仪表盘直观呈现...
metlo
Metlo API Security Secure Your API. Metlo is an open-source API security platform Metlo is an open source API security tool you can setup in 15 minutes that inventories your endpoints, detects bad actors and blocks malicious traffic in real time. Detect API attacks in real time. Automatically blo...
nosqlpot
NoSQL-Honeypot-Framework NoPo NoSQL-Honeypot-Framework NoPo es un honeypot de código abierto para bases de datos NoSQL que automatiza el proceso de detectar atacantes,registrar incidentes de ataque. Los motores de simulación se despliegan usando el framework twisted.Actualmente el framework tiene...
Defense-In-Depth at the Perception-Reasoning Interface of LLM-Centric Agentic UAV Swarms
Large Language Models LLMs increasingly support Uncrewed Aerial Vehicle UAV swarm operations such as data collection scheduling, where the model reads structured sensor reports and decides which sensors to visit. An adversary who quietly manipulates those reports can redirect the swarm without...
