attack-detection

Malicious traffic detection system

Firewall package for Laravel applications

A Linux Auditd rule set mapped to MITRE's Attack Framework

SDK providing app protection and threat monitoring for mobile devices. Works with Flutter, React Native, Android and iOS. Shield your app with free RASP. Detect reverse engineering, root (Magisk), jailbreak, Frida, emulators, bots, tampering and integrity issues, obfuscation, VPN usage, malware, and monitor device identification and fingerprint.

Elemental - An ATT&CK Threat Library

Data-Shield IPv4 Blocklist. DST = Europa

Atomic Purple Team Framework and Lifecycle

Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages

OSTE WLA automate the process of analyzing web server logs with the Python Web Log Analyzer.

IP.blackhole is an IP blacklist that uses multiple sensors to identify network attacks (e.g. SSH brute force) and spam incidents. All reports are evaluated and in case of too many incidents the responsible IP holder is informed to solve the problem.

Highly customizable low-interaction experimental honeypot that mimics specific hosts.

IoT Attack Detection with machine learning

Demystifying Random Number in Ethereum Smart Contract: Taxonomy, Vulnerability Identification, and Attack Detection (TSE Accepted)

Adaptive Pushback Mechanism for DDoS Detection and Mitigation employing P4 Data Planes

Official repository of the paper Privacy-friendly Synthetic Data for the Development of Face Morphing Attack Detectors

Face Morphing Attack Detection Benchmark (IJCB 2022: Robust Ensemble Morph Detection with Domain Generalization)

Unsupervised Face Morphing Attack Detection via Self-paced Anomaly Detection

Awesome DNS Security is a curated list of tools, best practices, and resources focused on securing DNS infrastructure.

High performance, attack detection from web server logs.

Detecting attack tool for HTTP server such as Apache and Nginx.