stratosphereips / StratosphereLinuxIPS

What it does

• Behavioral Intrusion Prevention. Slips acts as a powerful system to prevent intrusions based on detecting malicious behaviors in network traffic using machine learning.
• Modularity. Slips is written in Python and is highly modular with different modules performing specific detections in the network traffic.
• Targeted Attacks and Command & Control Detection. It places a strong emphasis on identifying targeted attacks and command and control channels in network traffic.
• Traffic Analysis Flexibility. Slips can analyze network traffic in real-time, PCAP files, and network flows from popular tools like Suricata, Zeek/Bro, and Argus.
• Threat Intelligence Updates. Slips continuously updates threat intelligence files and databases, providing relevant detections as updates occur.