Evaluation code used during the creation of the paper titled 'On the Evaluation and Deployment of Machine Learning Approaches for Intrusion Detection'.

irondemo is a set of shell and Perl scripts as well as some resources, to build a environment containing our IF-MAP based software from scratch. Development was done by Hochschule Hannover (Hannover University of Applied Sciences and Arts) .

irongraph is an experimental graph pattern matching (GPM) engine. It can be used to define and search for patterns within an IF-MAP Graph. As a result, different actions can be performed, e.g. generating new information or trigger other systems. irongraph was developed within the SIMU research project.

VisITMeta is an *experimental* IF-MAP 2.2 compliant MAP client written in Java that visualizes metadata stored on a MAP server. It supports features like showing a history of all metadata stored on a MAPS, using filter and search techniques to navigate the metadata as well as some visualization techniques like animations, highlighting and so on.…

irondetect is a correlation engine. Based on contexts, signatures and anomalies, it detects deviations from normal behavior. It presents correlations between IF-MAP metadata of different devices. By the definition of rules in a policy by a security expert, the correlated results can be used to analyze a network. If you need help for setting up, …

ironevents includes the event pojos for other iron projects like ironvas_EventsToAMQP. In the case you want easily use a iron project that emits events, you can import this project as dependency to process the events in your own code.

ironvas is a *highly experimental* integration of Open Vulnerability Assessment System (OpenVAS) into a MAP-Infrastructure.

ironvas_EventsToAMQP is a *highly experimental* integration of Open Vulnerability Assessment System (OpenVAS) into a MAP-Infrastructure. But in comparison to stock ironvas this project sents events to an AMQP queue instead of sending them to IFMAP.

irongenlog is a integration of diverse logfile systems into a MAP-Infrastructure. The integration aims to share security related informations, given by many logfile systems with other network components in the TNC architecture via IF-MAP.

ironnmap integrates the informations provided by nmap scans into a MAP-Infrastructure. The integration aims to share security related informations, given by nmap with other network components in the TNC architecture via IF-MAP.