attack-detection

Malicious traffic detection system

Firewall package for Laravel applications

A Linux Auditd rule set mapped to MITRE's Attack Framework

SDK providing app protection and threat monitoring for mobile devices. Works with Flutter, React Native, Android and iOS. Shield your app with free RASP. Detect reverse engineering, root (Magisk), jailbreak, Frida, emulators, bots, tampering and integrity issues, obfuscation, VPN usage, malware, and monitor device identification and fingerprint.

Elemental - An ATT&CK Threat Library

Atomic Purple Team Framework and Lifecycle

Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages

IP.blackhole is an IP blacklist that uses multiple sensors to identify network attacks (e.g. SSH brute force) and spam incidents. All reports are evaluated and in case of too many incidents the responsible IP holder is informed to solve the problem.

Highly customizable low-interaction experimental honeypot that mimics specific hosts.

OSTE WLA automate the process of analyzing web server logs with the Python Web Log Analyzer.

IoT Attack Detection with machine learning

Adaptive Pushback Mechanism for DDoS Detection and Mitigation employing P4 Data Planes

Demystifying Random Number in Ethereum Smart Contract: Taxonomy, Vulnerability Identification, and Attack Detection (TSE Accepted)

Official repository of the paper Privacy-friendly Synthetic Data for the Development of Face Morphing Attack Detectors

Face Morphing Attack Detection Benchmark

Unsupervised Face Morphing Attack Detection via Self-paced Anomaly Detection

Awesome DNS Security is a curated list of tools, best practices, and resources focused on securing DNS infrastructure.

High performance, attack detection from web server logs.

Detecting attack tool for HTTP server such as Apache and Nginx.

Feed of bad IPs (with blacklist hit scores)