Malicious traffic detection system

Firewall package for Laravel applications

A Linux Auditd rule set mapped to MITRE's Attack Framework

SDK providing app protection and threat monitoring for mobile devices, available for Flutter, Cordova, Android and iOS.

Elemental - An ATT&CK Threat Library

Atomic Purple Team Framework and Lifecycle

Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages

IP.blackhole is an IP blacklist that uses multiple sensors to identify network attacks (e.g. SSH brute force) and spam incidents. All reports are evaluated and in case of too many incidents the responsible IP holder is informed to solve the problem.

OSTE WLA automate the process of analyzing web server logs with the Python Web Log Analyzer.

Highly customizable low-interaction experimental honeypot that mimics specific hosts.

Demystifying Random Number in Ethereum Smart Contract: Taxonomy, Vulnerability Identification, and Attack Detection (TSE Accepted)

Adaptive Pushback Mechanism for DDoS Detection and Mitigation employing P4 Data Planes

Official repository of the paper Privacy-friendly Synthetic Data for the Development of Face Morphing Attack Detectors

Unsupervised Face Morphing Attack Detection via Self-paced Anomaly Detection

IoT Attack Detection with machine learning

Detecting attack tool for HTTP server such as Apache and Nginx.

Awesome DNS Security is a curated list of tools, best practices, and resources focused on securing DNS infrastructure.

High performance, attack detection from web server logs.

Feed of bad IPs (with blacklist hit scores)