Skip to content

A proof of concept code to show that intrusion detection can be done in a non-memory intensive manner. False positives are currently high. But Detection time is less than one second

License

Notifications You must be signed in to change notification settings

hiteshd/Service-Specific-Intrusion-Detection

Repository files navigation

This is a README for the Custom Intrusion Detection System

The program consists of 4 parts.
1. The Thread Spawning module
2. The Traffic capturing module
3. The Pattern matching and hence Detecting Intrusion Module
4. Misc Modules(Logging,Pcap generation,Interprocess Communication)

To run the program type
(you must be super user or have sudo)

# python ids.py [interface]
or
# chmod +x ids.py
# ./ids.py

If running inside a VM. This will require the password to the administrative account of the Host Operating System

*IMPORTANT*
Kindly install the following packages before attempting to run this system

install dpkt from https://code.google.com/p/dpkt/
or type
$ sudo apt-get intall python-dkpt for debain based distrubutions

This package uses the threading module in python

If absent in your compilation Kindly install python-extended-threading as 

$ sudo apt-get install python-extended-threading for debian

About

A proof of concept code to show that intrusion detection can be done in a non-memory intensive manner. False positives are currently high. But Detection time is less than one second

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages