IDS mailing list archives

Re: Firekeeper - IDS for Firefox available


From: hewhohuntscats () gmail com
Date: Fri, 09 Mar 2007 12:27:01 -0800



Doesn't SandboxIE (http://www.sandboxie.com/) already do something
similar, and work on Firefox and IE?

Though more fish in the pool to bring up the competitive programming
level up is always good. ^^
-Jex

On 3/6/07, Jan Wrobel <wrobel () blues ath cx> wrote:
Hi,

First official alpha release of Firekeeper - Intrusion Detection and
Prevention System for Firefox is available for download. Firekeeper
adds additional layer of protection to the browser. It uses flexible
rules similar to Snort ones to describe browser based attack
attempts. All incoming HTTP and HTTPS traffic is scanned with these
rules. HTTPS and compressed responses are scanned after
decryption/decompression. Suspicious response can trigger an alert that
is displayed to the user or can be automatically cancelled, depending
on an action specified in the rule. Firekeeper uses very effective
pattern matching engine from Snort and with well written rules doesn't
have a negative impact on the browser performance.

More information, screenshots and download links can be found at:
http://firekeeper.mozdev.org
Project is GPL licensed.

Comments are very welcome.

Cheers,
Jan Wrobel

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw
to learn more.
------------------------------------------------------------------------







------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw 
to learn more.
------------------------------------------------------------------------


Current thread: