A lightweight and customizable Intrusion Detection System (IDS) designed to monitor network traffic, detect suspicious activities, and protect your system from potential threats.
-
Real-Time Traffic Monitoring
Continuously analyze incoming and outgoing network traffic for anomalies. -
Detection Methods
- Signature-Based: Identifies known attack patterns.
- Anomaly-Based: Flags unusual network behavior.
-
Customizable Rule Engine
Define your own detection rules to tailor the system for specific needs. -
Alert System
Generate logs and alerts for detected threats. -
Extensibility
Modular architecture allows integration with third-party tools like Wireshark or Snort.
- Python 3.8 or higher
- Required Python libraries (see
requirements.txt
) - Administrator/root privileges for monitoring network traffic
git clone https://github.com/vishal-naik-byte/IDS.git
cd IDS
Install Dependencies
pip install -r requirements.txt
Run the IDS
sudo python main.py
Usage
Configure Rules
Modify or add custom detection rules in the rules/ directory.
Start Monitoring
Run the IDS on a specific network interface:
sudo python main.py
Logs and Alerts
Review generated alerts and logs in the logs/ directory for detailed information on potential threats.
Contributing
We welcome contributions! To contribute:
-
Fork this repository.
-
Create a new branch for your feature or fix:
git checkout -b feature-name
- Push your changes and create a pull request:
git push origin feature-name
License
This project is licensed under the MIT License.
Contact
For questions, issues, or feedback, feel free to open an issue in this repository or reach out via this form -- contact.