Powerful PHP-based data analysis tool for network security events captured by many common IDS tools, including snort and tcpdump.

AIDE is a file integrity checker that supports regular expressions. Licensed with GPL.

Provides open source application to check for presence of rootkits installed on Linux/Unix machines. Links to security related sites.

fail2ban is a POSIX/Linux tool used to ban IP addresses that generate too many password failures. ssh, iptables, ipfwadm and ipfw are currently supported.

Firestorm is a high-performance GPL-licensed network intrusion detection system (NIDS). Features include being fully pluggable, easily configurable, and an extremely scalable signature engine.

Small daemon that creates virtual hosts on a network (honeypot). Can be used as a virtual honeynet or for network monitoring. For *BSD, GNU/Linux, and Solaris.

A free lightweight network intrusion detection system for UNIX and Windows.

A single compilation of source, binaries, scripts and whitepapers on intrusion prevention systems. The aim is to quickly establish a working IPS within minutes.

LIDS is an enhancement for the Linux kernel written by Xie Huagang and Philippe Biondi. It implements several security features that are not in the Linux kernel natively. Some of these include: mandatory access controls (MAC), a port scan detector, fi...

Network-IDS that detects and stops DoS/DDoS attacks by using real-time Cisco NetFlow data.