fastnetmon

커뮤니티 에디션 FastNetMon - 여러 패킷 캡처 엔진NetFlow, IPFIX, sFlow, AFPACKET포트 미러을 기반으로 구축된 고성능 DDoS 탐지기/센서입니다. 무엇을 하나요? 배포된 네트워크에서 대량의 트래픽, 패킷/바이트/플로우초당를 보내거나 받는 호스트를 탐지하고, 해당 이벤트를 처리하기 위해 설정 가능한 작업을 수행합니다. 이러한 설정 가능한 작업에는 알림, 스크립트 호출 또는 BGP 알림 만들기가 포함됩니다. 프로젝트 🌏️ 공식 사이트 ⭐️ FastNetMon Advanced, 상용 에디션 🌟️...

Intrusion-Alert-Educational-Network-IDS

🛡️ 入侵警报-教育型网络入侵检测系统 一个使用 Python 构建的轻量级入侵检测系统（IDS），用于监控网络流量，并根据每个 IP 的请求速率检测潜在的 DoS/DDoS 攻击。 📌 功能特点 📡 使用 Scapy 进行实时数据包嗅探 📊 跟踪每个 IP 地址的请求数 🚨 检测潜在的 DoS/DDoS 攻击 🪟 使用 Tkinter 的图形界面告警系统 ⚡ 多线程以提高性能 🧠 工作原理 1. 该脚本监听所有传入的 IP 数据包。 2. 跟踪每个数据包的源 IP。 3. 按秒对请求进行计数。 4. 如果某个 IP 超过阈值（默认：每秒 100 个请求），则会触发告警。 ⚙️ 环境要求...

dns_amplification_scanner

DNS増幅DDoS検出・検証ツール このスクリプトは、DNS増幅型分散サービス拒否（DDoS）攻撃に悪用される可能性のあるDNSサーバーを特定し、検証するために設計されています。これは、プラグイン35450を使用してこの問題を検出する際に 誤検知 を生成する可能性がある、Nessusなどの自動脆弱性スキャナの限界に対処します。 背景...

A Transformer-Based Approach for DDoS Attack Detection in IoT Networks

DDoS attacks have become a major threat to the security of IoT devices and can cause severe damage to the network infrastructure. IoT devices suffer from the inherent problem of resource constraints and are therefore susceptible to such resource-exhausting attacks. Traditional methods for detecti...

Optimizing DDoS Detection in SDNs through Machine Learning Models

The emergence of Software-Defined Networking SDN has changed the network structure by separating the control plane from the data plane. However, this innovation has also increased susceptibility to DDoS attacks. Existing detection techniques are often ineffective due to data imbalance and accurac...

MULTI-LF: a Unified Continuous Learning Framework for Real-Time DDoS Detection in Multi-Environment Networks

Detecting Distributed Denial of Service DDoS attacks in Multi-Environment M-En networks presents significant challenges due to diverse malicious traffic patterns and the evolving nature of cyber threats. Existing AI-based detection systems struggle to adapt to new attack strategies and lack...

JA4+ - Suite Of Network Fingerprinting Standards

JA4+ is a suite of network Fingerprinting methods that are easy to use and easy to share. These methods are both human and machine readable to facilitate more effective threat-hunting and analysis. The use-cases for these fingerprints include scanning for threat actors, malware detection, session...

Fedora: Security Advisory for fastnetmon (FEDORA-2022-18023b665f)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 37 Update: fastnetmon-1.2.1-4.20220528git420e7b8.fc37

DDoS detection tool with sFlow, Netflow, IPFIX and port mirror support...

[SECURITY] Fedora 36 Update: fastnetmon-1.2.1-2.20220528git420e7b8.fc36

DDoS detection tool with sFlow, Netflow, IPFIX and port mirror support...

Fedora: Security Advisory for fastnetmon (FEDORA-2022-5d37367673)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for cacti, cacti-spine (important)

openSUSE Security Update: Security update for cacti, cacti-spine Announcement ID: openSUSE-SU-2021:0787-1 Rating: important References: 1180804 Cross-References: CVE-2020-35701 CVSS scores: CVE-2020-35701 NVD : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports...

Security update for cacti, cacti-spine (important)

openSUSE Security Update: Security update for cacti, cacti-spine Announcement ID: openSUSE-SU-2021:0755-1 Rating: important References: 1180804 Cross-References: CVE-2020-35701 CVSS scores: CVE-2020-35701 NVD : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2...

Artificial Inteligent Packet Inspection Engine: AIEngine

AIEngine is a next generation interactive/programmable Python/Ruby/Java packet inspection engine with capabilities of learning without any human intervention, NIDS Network Intrusion Detection System functionality, DNS domain classification, network collector, network forensics and many others...