All Projects → CESNET → Nemea-Detectors

CESNET / Nemea-Detectors

Licence: other
Detection modules of the Nemea system.

Programming Languages

C++
36643 projects - #6 most used programming language
c
50402 projects - #5 most used programming language
python
139335 projects - #7 most used programming language
M4
1887 projects
shell
77523 projects
Makefile
30231 projects

Projects that are alternatives of or similar to Nemea-Detectors

Nemea-Modules
Base modules of the Nemea system. This repository contains modules for export, replay, filtering, merging etc.
Stars: ✭ 14 (-30%)
Mutual labels:  nemea, liberouter
Nemea
System for network traffic analysis and anomaly detection.
Stars: ✭ 70 (+250%)
Mutual labels:  nemea, liberouter
Netopeer-GUI
Graphical user interface for NETCONF client
Stars: ✭ 31 (+55%)
Mutual labels:  liberouter

NEMEA Detectors

Detection modules of the NEMEA system provide mechanisms for automatic detection of malicious network traffic. This repository contains modules with the following detection capabilities:

  • amplification_detection: universal detector of DNS/NTP/... amplification attacks
  • blacklistfilter: module that checks whether observed IP addresses are listed in any of given public-available blacklists
  • hoststatsnemea: universal detection module based on computation of statistics about hosts, it can detect some types of DoS, DDoS, scanning
  • sip_bf_detector: detector of brute-force attacks attempting to breach passwords of users on SIP (Session Initiation Protocol) devices
  • tunnel_detection: detector of communication tunnels over DNS (e.g. using iodine or tcp2dns)
  • voip_fraud_detection: detector of guessing dial scheme of Session Initiation Protocol (SIP)
  • vportscan_detector: detector of vertical scans based on TCP SYN
Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].