Stratosphere IPS
A behavioral-based free software Intrusion Prevention System.
The Stratosphere IPS is a free software Intrusion Prevention System that uses Machine Learning to detect and block known malicious behaviors in the network traffic. The behaviors are learnt from highly verified malware and normal traffic connections in our research laboratory. Its goal is to provide the community and especially vulnerable targets with low budgets such as NGO's and civil society groups with an advanced tool that can protect against targeted attacks.
- The project's own website: https://stratosphereips.org/
The Stratosphere IPS project was born in the CTU University of Prague in Czech Republic, as part of the PhD work of Sebastian García. The core of the Stratosphere IPS is a machine learning algorithm that analyzes individual network connections to extract their behavioral pattern. The patterns of known malicious connections are used to train the system and can subsequently be used to detect unknown traffic in new networks. The algorithms were publicly published and the behavioral models are continually being verified by academic researchers.
Scanning your network is a very security and privacy sensitive matter. Because Stratosphere is published as a free software product, you do not have to trust it - you get to inspect every aspect of its inner workings and can freely improve upon it. It is already being used across the world - within multinationals, NGO's and academia.
The design goal of the Stratosphere IPS is to develop a highly advanced and free network-based malicious actions detector that can help protect individuals, middle-size organizations, NGOs and almost any type of network.
Agent Technology Center, CTU University of Prague