metlo

Metlo API Security Protege tu API. Metlo es una plataforma de seguridad de API de código abierto Metlo es una herramienta de seguridad de API de código abierto que puedes configurar en menos de 15 minutos, inventaria tus endpoints, detecta actores maliciosos y bloquea tráfico malicioso en tiempo...

reflector

reflector Descripción La extensión de Burp Suite es capaz de encontrar XSS reflejado en la página en tiempo real mientras se navega por el sitio web e incluye algunas características como: Resaltado de la reflexión en la pestaña de respuesta. Prueba de qué símbolos están permitidos en esta...

ThreatHound

ThreatHound ThreatHound is an advanced cybersecurity tool designed to facilitate efficient threat detection and analysis, windows events logs. it offers a user-friendly interface for managing and analyzing security data. Key features include log analysis, Sigma rule integration, and real-time...

fibratus

Fibratus Sensor de seguridad para la detección y protección de amenazas en tiempo real Comenzar » Documentación • Reglas • Filaments • Descargas • Debates Fibratus detecta y erradica tácticas avanzadas de atacantes, malware y amenazas emergentes al examinar y contrastar un amplio espectro de...

FalconEye

FalconEye: Software de detección en tiempo real para inyecciones de procesos en Windows FalconEye es un software de detección para endpoints Windows para inyecciones de procesos en tiempo real. Es un controlador en modo kernel que tiene como objetivo detectar inyecciones de procesos a medida que...

Detect-CVE-2017-0144-attack

Python 程序检测 CVE-2017-0144 攻击 该 Python 程序负责实时持续跟踪、监控网络流量。当检测到 CVE-2017-0144（永恒之蓝）攻击时，它会在控制台屏幕上发出警报。 1. 实验环境模型 本次实验在 VMWare 中的 3 台虚拟机上完成：1 台攻击机（Kali Linux），1 台受害者机（Windows 7 - 64bit SP1），1 台监控机（Windows 10）。各机器使用相同的网卡（NAT），并确保它们可以互相 ping 通。一些注意事项： Kali 机器需要注意更新到最新版本 sudo apt update Windows 7 机器关闭防火墙...

Introducing Continuous Vulnerability Assessment: Real-Time Defense for the AI Threat Era

Detect exposure to new vulnerabilities the moment they are published with Wiz CVA...

ShielDroid: A Hybrid Approach Integrating Machine and Deep Learning for Android Malware Detection

The rapid advancement of modern technology has led to a significant increase in the use of smart devices, such as smartphones and tablets, resulting in the widespread adoption of mobile applications. Although applications are required to undergo malware screening before being published on officia...

Intelligent Detection and Mitigation of Carpet-Bombing DDoS Attacks in SDN Using Retrieval-Augmented Generation and Large Language Models

Software-Defined Networking SDN provides flexible and programmable network management; however, its centralized control architecture remains highly vulnerable to Distributed Denial-of-Service DDoS attacks, particularly Carpet-Bombing DDoS attacks that distribute malicious traffic across multiple...

Smart Contract Security beyond Detection

Smart contract security has progressed from vulnerability detection toward a broader research agenda that includes semantic reasoning, automated repair, adversarial robustness, and real-time exploit detection. This paper develops a capstone-oriented research narrative around four directions:...

A-THENA: Early Intrusion Detection for IoT with Time-Aware Hybrid Encoding and Network-Specific Augmentation

The proliferation of Internet of Things IoT devices has significantly expanded attack surfaces, making IoT ecosystems particularly susceptible to sophisticated cyber threats. To address this challenge, this work introduces A-THENA, a lightweight early intrusion detection system EIDS that...

RansomTrack: A Hybrid Behavioral Analysis Framework for Ransomware Detection

Ransomware poses a serious and fast-acting threat to critical systems, often encrypting files within seconds of execution. Research indicates that ransomware is the most reported cybercrime in terms of financial damage, highlighting the urgent need for early-stage detection before encryption is...

Next-Generation Cyberattack Detection with Large Language Models: Anomaly Analysis across Heterogeneous Logs

This project explores large language models LLMs for anomaly detection across heterogeneous log sources. Traditional intrusion detection systems suffer from high false positive rates, semantic blindness, and data scarcity, as logs are inherently sensitive, making clean datasets rare. We address...

AI-Powered Algorithms for the Prevention and Detection of Computer Malware Infections

The rise in frequency and complexity of malware attacks are viewed as a major threat to modern digital infrastructure, which means that traditional signature-based detection methods are becoming less effective. As cyber threats continue to evolve, there is a growing need for intelligent systems t...

Detecting Malicious Entra OAuth Apps with LLM-Based Permission Risk Scoring

This project presents a unified detection framework that constructs a complete corpus of Microsoft Graph permissions, generates consistent LLM-based risk scores, and integrates them into a real-time detection engine to identify malicious OAuth consent activity...

Rapid7: 7 years of recognition in Gartner® Magic Quadrant™ for SIEM

We’re proud to share that Rapid7 has been recognized in the 2025 Gartner Magic Quadrant for Security Information and Event Management SIEM. This is the seventh year we have been positioned in this report, which means we’ve been recognized in every report following the launch of our SIEM offering,...

A Statistical Method for Attack-Agnostic Adversarial Attack Detection with Compressive Sensing Comparison

Adversarial attacks present a significant threat to modern machine learning systems. Yet, existing detection methods often lack the ability to detect unseen attacks or detect different attack types with a high level of accuracy. In this work, we propose a statistical approach that establishes a...

CST-AFNet: A Dual Attention-Based Deep Learning Framework for Intrusion Detection in IoT Networks

The rapid expansion of the Internet of Things IoT has revolutionized modern industries by enabling smart automation and real time connectivity. However, this evolution has also introduced complex cybersecurity challenges due to the heterogeneous, resource constrained, and distributed nature of...

Collaborative P4-SDN DDoS Detection and Mitigation with Early-Exit Neural Networks

Distributed Denial of Service DDoS attacks pose a persistent threat to network security, requiring timely and scalable mitigation strategies. In this paper, we propose a novel collaborative architecture that integrates a P4-programmable data plane with an SDN control plane to enable real-time DDo...

Enhancing GraphQL Security by Detecting Malicious Queries Using Large Language Models, Sentence Transformers, and Convolutional Neural Networks

GraphQL's flexibility, while beneficial for efficient data fetching, introduces unique security vulnerabilities that traditional API security mechanisms often fail to address. Malicious GraphQL queries can exploit the language's dynamic nature, leading to denial-of-service attacks, data...