mirror of
https://git.FreeBSD.org/ports.git
synced 2025-01-10 07:04:03 +00:00
14 lines
707 B
Plaintext
14 lines
707 B
Plaintext
Bro is an open-source, Unix-based Network Intrusion Detection System (NIDS)
|
|
that passively monitors network traffic and looks for suspicious activity.
|
|
Bro detects intrusions by first parsing network traffic to extract its
|
|
application-level semantics and then executing event-oriented analyzers that
|
|
compare the activity with patterns deemed troublesome. Its analysis includes
|
|
detection of specific attacks (including those defined by signatures, but
|
|
also those defined in terms of events) and unusual activities (e.g., certain
|
|
hosts connecting to certain services, or patterns of failed connection
|
|
attempts).
|
|
|
|
Bro is documented in the USENIX 1998 Security Conference proceedings.
|
|
|
|
WWW: https://www.bro.org/
|