Suricata (software)

Suricata is an open source-based intrusion detection system (IDS) and intrusion prevention system (IPS). It was developed by the Open Security Foundation (OISF). A beta version was released in December 2009, with the first standard release following in July 2010.[3][4]

Suricata
Developer(s)Open Information Security Foundation
Stable release
6.0.1 / December 4, 2020 (2020-12-04)[1]
Repository
Written inC, Rust
Operating systemFreeBSD, Linux, UNIX, Mac OS X, Microsoft Windows
Type
LicenseGNU General Public License[2]
Websitesuricata-ids.org

Features

[5]

  • Multi-threading
  • Automatic protocol detection
  • Gzip decompression
  • Independent HTP library
  • Standard input methods
  • Unified2 output
  • Flow variables
  • Fast IP matching
  • HTTP log module
  • JSON standard outputs
  • Windows binaries
  • Lua scripting[6]
  • Prelude output[7]
  • file matching, logging, extraction, md5 checksum calculation[7]
  • IP reputation
  • DNS logger
  • VXLAN support since 4.1.5
in a future release
[5]
  • Global flow variables

Third-party tools

Third-party tools available for Snort are compatible with Suricata, like the following:

  • Snorby
  • BASE
  • Sguil (free)
  • Aanval (commercial)
  • Telesoft CERNE Open IDS Platform (commercial)

Free intrusion detection systems

See also

References
  1. "Releases - OISF/suricata". Retrieved 5 December 2020 – via GitHub.
  2. "Suricata license".
  3. "New Open Source Intrusion Detector Suricata Released". Slashdot. 2009-12-31. Retrieved 2011-11-08.
  4. "Suricata Downloads". Open Security Information Foundation. Retrieved 2011-11-08.
  5. Jonkman, Matt (2009-12-31). "Suricata IDS Available for Download!". Seclists.org. Retrieved 2011-11-08.
  6. "Suricata Features". Retrieved 2012-10-06.
  7. "Suricata All Features". Retrieved 2012-10-06.
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.