ipal_evaluate
Intrusion Detection Evaluation - A framework to evalute (Industrial) Intrusion Detection Systems.
ipal_ids_framework
Industrial Intrusion Detection - A framework for protocol-independent industrial intrusion detection on top of IPAL.
https://github.com/cdpxe/openbsdhacks
Some of my security-related coding projects for OpenBSD: A kernel-based user-profile intrusion detection system (FUPIDS) and an ICMP-based "port-knocking" service (openportd).
zeek_anomaly_detector
A completely automated anomaly detector Zeek network flows files (conn.log).
ipal_transcriber
Industrial protocol transcriber - a common representation of industrial communication as input for protocol-independent industrial intrusion detection systems.
stratospherelinuxips
Slips, a free software behavioral Python intrusion prevention system (IDS/IPS) that uses machine learning to detect malicious behaviors in the network traffic. Stratosphere Laboratory, AIC, FEL, CVUT in Prague.