intrusion detection system

aparna · 02-04-2002, 11:57 PM

Hi,
I'm doing a project intrusion detection system.For that can any one tell me what tool i have to use for audit collection(collecting user entered code).I'm doing it in linux platform and c language.Can you help me with the source code which is available.
thanks in advance ....aparna

aq_mishu · 12-31-2005, 02:05 AM

first check those commercial softs for getting an idea.. then make it...

kirtimaan_bkn · 12-31-2005, 04:15 AM

intrusion detection system is not a small topic. It covers wide area of computer and network security. For what you are specially looking for ? Are you looking for port scanning ? A user also doing same project (quite interesting,two students think abt same project at same time) made a thread for this :

http://www.linuxquestions.org/questi...wpost&t=396615

If so than you can search google for that.

Ellops · 12-31-2005, 05:42 PM

Kirtmaan's right,but meanwhile you could also check these narrowing down your aims

h**p://www.lids.org/

and this about general information (tut):

h**p://www.sans.org/resources/idfaq/

carambar · 01-02-2006, 10:30 AM

Also, maybe you could have a look at snort... it's the defacto standard for IDS and IPS.

ps - my 1st post - w00t