Navigation



Suricata – Open Source Next Generation Intrusion Detection and Prevention Engine

Last updated: June 16, 2010 | 9,034 views

Keep on Guard!


The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field.

Basically it’s a is a multi-threaded intrusion detection/prevention engine engine available from the Open Information Security Foundation

OISF is part of and funded by the Department of Homeland Security’s Directorate for Science and Technology HOST program (Homeland Open Security Technology), by the the Navy’s Space and Naval Warfare Systems Command (SPAWAR), as well as through the very generous support of the members of the OISF Consortium. More information about the Consortium is available, as well as a list of our current Consortium Members.

The Suricata Engine and the HTP Library are available to use under the GPLv2.

The HTP Library is an HTTP normalizer and parser written by Ivan Ristic of Mod Security fame for the OISF. This integrates and provides very advanced processing of HTTP streams for Suricata. The HTP library is required by the engine, but may also be used independently in a range of applications and tools.

You can download Suricata v0.9 here:

suricata-0.9.0.tar.gz

Or read more here.

Share2
+1
Share
Shares 2
Posted in: Countermeasures, Networking Hacking, Security Software

, , , , , , , ,


Latest Posts:


SQLiv - SQL Injection Dork Scanning Tool SQLiv – SQL Injection Dork Scanning Tool
SQLiv is a Python-based massive SQL Injection dork scanning tool which uses Google, Bing or Yahoo for targetted, multiple-domain or reverse domain scans.
October 23, 2017 - 132 Shares
OSSIM Download - Open Source SIEM Tools & Software OSSIM Download – Open Source SIEM Tools & Software
OSSIM is a popular Open Source SIEM or Security Information and Event Management (SIEM) product, providing event collection, normalization and correlation.
October 20, 2017 - 166 Shares
What You Need To Know About KRACK WPA2 Wi-Fi Attack What You Need To Know About KRACK WPA2 Wi-Fi Attack
The Internet has been blowing up in the past week about the KRACK WPA2 attack that is extremely widespread and is a flaw in the Wi-Fi standard itself.
October 20, 2017 - 299 Shares
Spaghetti Download - Web Application Security Scanner Spaghetti Download – Web Application Security Scanner
Spaghetti is an Open-source Web Application Security Scanner, it is designed to find various default and insecure files, configurations etc.
October 18, 2017 - 313 Shares
Taringa Hack - 27 Million User Records Leaked Taringa Hack – 27 Million User Records Leaked
The Taringa hack is actually one of the biggest leaks of the year with 27 million weakly hashed passwords breached, but it's not often covered in the West.
October 12, 2017 - 210 Shares
A2SV - Auto Scanning SSL Vulnerability Tool For Poodle & Heartbleed A2SV – Auto Scanning SSL Vulnerability Tool For Poodle & Heartbleed
A2SV is a Python-based SSL Vulnerability focused tool that allows for auto-scanning and detection of the common and well-known SSL Vulnerabilities.
October 9, 2017 - 398 Shares


3 Responses to Suricata – Open Source Next Generation Intrusion Detection and Prevention Engine

  1. Jim Barnes May 13, 2010 at 5:08 pm #

    I hope that companies will take a serious look at the tools the open source community is creating. My friends in the security world are still surprised at how little the executives know or care to know about the vulnerabilities their systems have. Thanks again for making me aware of another tool. Keep your information coming!

  2. DaFyre May 13, 2010 at 7:54 pm #

    I second that, Jim!

    I have actually tested Suricata a while back. Even in the early stages, it is an impressive product and quite useful! I haven’t switched completely over to their engine, but I’m definitely leaning that way! I currently use Snort as my IPS. I haven’t tested Suricata in a while, so I’m looking forward to trying the next rendition of it!

    See Yas!

  3. NNM May 14, 2010 at 12:28 pm #

    Yea, finally. Personally going to wait a few versions and reviews.

    But to: “surprised at how little the executives know or care to know about the vulnerabilities their systems have.”

    I’m shocked daily by this. They think “hacking” is marginal. They don’t think it’s a threat. They don’t know that it is.

    I see brand new servers get massively attacked within 5 minutes of being online. Automated attacks, but still shows you how widespread this is… It doesn’t always take 1 hacker and 1 specific target. The targets first have to be revealed… But if you are reading this, you know all that already..

    A lot of people will tell you “I don’t need an antivirus or firewall, I only surf pages I know.” ………… Wow – It’s a good decade to be a hacker.