18 matches found
fastnetmon
Community Edition FastNetMon — высокопроизводительный детектор/сенсор DDoS, построенный на основе нескольких механизмов захвата пакетов: NetFlow, IPFIX, sFlow, AFPACKET зеркалирование портов. Что мы делаем? Мы обнаруживаем хосты в развернутой сети, которые отправляют или получают большие объемы...
dns_amplification_scanner
DNS 증폭 DDoS 탐지 및 검증 도구 이 스크립트는 DNS 증폭 분산 서비스 거부DDoS 공격에 악용될 수 있는 잠재적 DNS 서버를 식별하고 검증하도록 설계되었습니다. 이는 플러그인 35450을 사용하여 이 문제를 탐지할 때 오탐을 생성할 수 있는 Nessus와 같은 자동화된 취약점 스캐너의 한계를 해결합니다. 배경 DNS 증폭 공격은 잘못 구성되었거나 개방된 DNS 리졸버를 악용하는 반사 기반 DDoS 공격의 한 유형입니다. 공격자는 스푸핑된 출발지 IP 주소로 작은 DNS 쿼리를 전송하여 DNS 서버가 피해자의 IP...
Intrusion-Alert-Educational-Network-IDS
🛡️ Intrusion-Alert-Educational-Network-IDS Python으로 구축된 경량 침입 탐지 시스템IDS으로, 네트워크 트래픽을 모니터링하고 IP별 요청 속도를 기반으로 잠재적인 DoS/DDoS 공격을 탐지합니다. 📌 기능 📡 Scapy를 사용한 실시간 패킷 스니핑 📊 IP 주소별 요청 수 추적 🚨 잠재적인 DoS/DDoS 공격 탐지 🪟 Tkinter 기반 GUI 알림 시스템 ⚡ 성능 향상을 위한 멀티스레딩 🧠 작동 방식 1. 스크립트는 모든 수신 IP 패킷을 수신합니다. 2. 각 패킷의 소스 IP가...
A Feature-Rich Embedded NIDS with EBPF/XDP: Detector and Architecture Trade-Offs
Distributed Denial-of-Service DDoS attacks remain a serious threat to transport networks, with recent attack volumes exceeding 30 Tbps, and the telecommunications industry being the main target. Recent work has yet to study the impact of the hosting software architecture on network monitoring...
A Deployment-Oriented and Resource-Efficient Neuro-Symbolic Framework for Explainable DDoS Detection in Operational Technology Networks
Operational technology OT environments, including programmable logic controllers PLCs, industrial control systems ICS, and supervisory control and data acquisition SCADA systems, are increasingly targeted by distributed denial-of-service DDoS attacks. This paper presents a neuro-symbolic framewor...
When Time Meets Space: Entropy Integration and Dynamic Threshold for Adaptive DDoS Detection in SDN
Entropy-based Distributed Denial of Service DDoS detection in Software-Defined Networking SDN commonly relies on spatial traffic distributions and static or loosely adaptive thresholds, making it vulnerable to legitimate traffic fluctuations in Internet of Things IoT environments. This paper...
Enhanced Multi-Class DDoS Attack Identification Using a Meta-Learning Ensemble
Distributed Denial of Service DDoS attacks continue to pose significant threats to network availability and security. While many detection systems focus on binary classification attack vs. benign, effective mitigation often requires identifying the specific type of DDoS attack. This paper...
A Transformer-Based Approach for DDoS Attack Detection in IoT Networks
DDoS attacks have become a major threat to the security of IoT devices and can cause severe damage to the network infrastructure. IoT devices suffer from the inherent problem of resource constraints and are therefore susceptible to such resource-exhausting attacks. Traditional methods for detecti...
Optimizing DDoS Detection in SDNs through Machine Learning Models
The emergence of Software-Defined Networking SDN has changed the network structure by separating the control plane from the data plane. However, this innovation has also increased susceptibility to DDoS attacks. Existing detection techniques are often ineffective due to data imbalance and accurac...
MULTI-LF: a Unified Continuous Learning Framework for Real-Time DDoS Detection in Multi-Environment Networks
Detecting Distributed Denial of Service DDoS attacks in Multi-Environment M-En networks presents significant challenges due to diverse malicious traffic patterns and the evolving nature of cyber threats. Existing AI-based detection systems struggle to adapt to new attack strategies and lack...
JA4+ - Suite Of Network Fingerprinting Standards
JA4+ is a suite of network Fingerprinting methods that are easy to use and easy to share. These methods are both human and machine readable to facilitate more effective threat-hunting and analysis. The use-cases for these fingerprints include scanning for threat actors, malware detection, session...
Fedora: Security Advisory for fastnetmon (FEDORA-2022-18023b665f)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 37 Update: fastnetmon-1.2.1-4.20220528git420e7b8.fc37
DDoS detection tool with sFlow, Netflow, IPFIX and port mirror support...
[SECURITY] Fedora 36 Update: fastnetmon-1.2.1-2.20220528git420e7b8.fc36
DDoS detection tool with sFlow, Netflow, IPFIX and port mirror support...
Fedora: Security Advisory for fastnetmon (FEDORA-2022-5d37367673)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Security update for cacti, cacti-spine (important)
openSUSE Security Update: Security update for cacti, cacti-spine Announcement ID: openSUSE-SU-2021:0787-1 Rating: important References: 1180804 Cross-References: CVE-2020-35701 CVSS scores: CVE-2020-35701 NVD : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports...
Security update for cacti, cacti-spine (important)
openSUSE Security Update: Security update for cacti, cacti-spine Announcement ID: openSUSE-SU-2021:0755-1 Rating: important References: 1180804 Cross-References: CVE-2020-35701 CVSS scores: CVE-2020-35701 NVD : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2...
Artificial Inteligent Packet Inspection Engine: AIEngine
AIEngine is a next generation interactive/programmable Python/Ruby/Java packet inspection engine with capabilities of learning without any human intervention, NIDS Network Intrusion Detection System functionality, DNS domain classification, network collector, network forensics and many others...