Add mention of CrowdSec to the IDS/IPS section

This commit is contained in:
mazzma12 2021-10-08 15:22:18 +02:00
parent 7d90ec17d1
commit 0c3ec9c8c2
No known key found for this signature in database
GPG Key ID: 0CC986AE06D004DB

View File

@ -101,6 +101,7 @@ Thanks to all [contributors](https://github.com/sbilly/awesome-security/graphs/c
- [Fail2Ban](http://www.fail2ban.org/wiki/index.php/Main_Page) - Scans log files and takes action on IPs that show malicious behavior.
- [SSHGuard](http://www.sshguard.net/) - A software to protect services in addition to SSH, written in C
- [Lynis](https://cisofy.com/lynis/) - an open source security auditing tool for Linux/Unix.
- [CrowdSec](https://github.com/crowdsecurity/crowdsec) - CrowdSec is a free, modern & collaborative behavior detection engine, coupled with a global IP reputation network. It stacks on Fail2Ban's philosophy but is IPV6 compatible and 60x faster (Go vs Python), uses Grok patterns to parse logs and YAML scenario to identify behaviors. CrowdSec is engineered for modern Cloud / Containers / VM based infrastructures (by decoupling detection and remediation). Once detected, you can remedy threats with various bouncers (firewall block, nginx http 403, Captchas, etc.) while the aggressive IPs can be sent to CrowdSec for curation before being shared among all users to further strengthen the community
### Honey Pot / Honey Net