Collaborate Disseminate
I want to create a system to detect scripted attacks because they are easy to do for any amateur.
I want to make an ML model to detect whether the network (LAN etc.) has been compromised or is under any malicious attack. The way I want to… Continue reading How to detect malicious packets in a network? [closed]
Has research been made on the real-time packet analysis yet? Or is there yet to be research conducted on it?
I am currently looking for datasets for IDS, for which machine learning could be applied to in order to analyse future attacks. Th… Continue reading Real-time packet analysis IDS for IIoT
Has research been made on the real-time packet analysis yet? Or is there yet to be research conducted on it?
I am currently looking for datasets for IDS, for which machine learning could be applied to in order to analyse future attacks. Th… Continue reading Real-time packet analysis IDS for IIoT
Are there any websites with datasets which could be used to create an intrusion detection system for IIoT classifying between malicious and benign packets in real time within a general industrial environment?
Continue reading Intrusion Detection System for Industrial IoT [closed]
My organization has some unusual topology that I’m unhappy with.
The main gateway (Checkpoint R80.10) firewall includes an IPS blade.
Each workstation installed with Trend Micro Apex One agent with HIPS enabled.
Having both IPS & HIP… Continue reading IPS & HIPS on the LAN [closed]
What is the point of geoblocking IP addresses with cisco firepower or a similar service if the firewall would block the request anyway? For example, We only do business in the USA but see source IP’s from Russia/Netherlands etc hitting th… Continue reading Whats The Point of GeoBlocking if the Firewall Has An Implicit Deny?
There are a number of different Managed Security Service Providers (MSSPs) offering managed detection and response services. They tend to use what is called an endpoint agent, while only some use a network appliance in addition.
I recently installed the package AIDE (Advanced Intrusion Detection Environment) on my Linux server. This is a web server installed about a year ago. Since no integrity checks have been done before on this server, I can’t tell if it is hac… Continue reading Possible to verify the integrity of AIDE itself?
I know what fail2ban does; it monitors the firewall logs and finds ip addresses that have too many failed logins to ssh; and then tells the firewall to drop packets from those addresses.
So is fail2ban an IPS?
Continue reading Is fail2ban an intrusion prevention system?
My Sourcefire IPS is firing alerts for malicious activity but the source and destination networks dont belong to me, should i be concerned?
Continue reading IPS/Sourcefire sending alerts where the source nor destination is mine [closed]