hi... dear i badly need an "application behavior detection system" have we any open source application for application behavior detection especially for the undetected computer viruses ...


thanx for ur help...

Could you tell us why or what requires this? I'm asking because passive or on the fly detection can be done by a host of things, for reactive detection ideas see Systrace or equivalent, but adding the term "behaviour" sounds like a) marketoid language from Intrusion Prevention Systems (IPS) vendors, and b) points to a framework or application having a prefab ruleset, learning and blocking capabilities. AFAIK there is no such thing (usable, complete, polished) for GNU/Linux right now. If you're haven't done so already I would suggest to first take measures you can do right now to harden your machine and worry about this later on.


Viruses are not the biggest threat to GNU/Linux. Please search Linuxquestions.org for discussions about viruses to learn why.

if you need to harden your system, look out for SELinux (comes with Fedora Core 8 and detects some unsafe programming in your apps, like root permissions you don't need) or Bastille Linux, the hardened distro, or StrongSwan. good luck

L