OSSIM - AlienVault Open Source SIEM 2.1

OSSIM - AlienVault Open Source SIEM

OSSIM stands for Open Source Security Information Management. Its goal is to provide a comprehensive compilation of tools which, when working together, grant network/security administrators with a detailed view over each and every aspect of his or her networks, hosts, physical access devices, server, etc.

Besides getting the most out of well known open source tools, some of which are briefly described below, OSSIM provides a strong correlation engine, detailed low, medium and high level visualization interfaces, and reporting and incident management tools, based on a set of defined assets such as hosts, networks, groups and services.

All of this information can be restricted by network or sensor in order to provide only the required information to specific users; allowing for a fine grained multi–user security environment. Finally, the ability to perform as an IPS (Intrusion Prevention System), using correlated information from virtually any source, will be a useful addition to any security professional’s arsenal.

OSSIM features the following software components:
- Arpwatch – used for MAC anomaly detection.
- P0f – used for passive OS detection and OS change analysis.
- Pads – used for service anomaly detection.
- Nessus – used for vulnerability assessment and for cross correlation (IDS vs Security Scanner).
- Snort – the IDS, also used for cross correlation with nessus.
- Tcptrack – used for session data information which can prove useful for attack correlation.
- Ntop – which builds an impressive network information database from which we can identify aberrant behavior/anomaly detection.
- Nagios – fed from the host asset database, it monitors host and service availability information.
- Osiris – a great HIDS.
- OCS-NG – cross-platform inventory solution.
- OSSEC – integrity, rootkit, registry detection, and more

License type: GNU General Public License
Date added: 3 years, 8 months 29 days ago | Last updated: 3 years, 8 months 9 days ago

More popular Information System

Listing Files

ossim-2.1
  • FILES
  • 1.7 KB
  • 09/15/2004 09:02:19
db
  • ossim_data.sql
  • 1.3 MB
  • 05/20/2009 09:10:26
  • OS_plugin_reference_single.sql
  • 20.8 KB
  • 03/23/2007 19:18:01
  • snort_osvdb.sql
  • 197.0 KB
  • 03/26/2007 11:27:43
  • ossim_config.sql
  • 9.8 KB
  • 07/06/2009 09:03:35
  • create_mysql.sql
  • 43.0 KB
  • 07/10/2009 08:19:26
plugins
  • snarewindows.sql
  • 78.4 KB
  • 06/04/2009 13:02:18
  • postfix.sql
  • 1.4 KB
  • 03/13/2009 13:40:53
  • oval.sql
  • 935.1 KB
  • 06/18/2009 15:48:57
  • apache.sql
  • 5.3 KB
  • 03/20/2009 12:31:54
  • sitescope.sql
  • 15.8 KB
  • 05/13/2009 10:38:56
  • heartbeat.sql
  • 2.1 KB
  • 03/26/2007 18:36:15
  • modsecurity.sql
  • 5.1 KB
  • 01/11/2009 18:19:16
  • p0f.sql
  • 987 Bytes
  • 08/03/2007 11:35:49
  • netgear.sql
  • 1.7 KB
  • 03/26/2007 18:36:15
  • ossim-threshold.sql
  • 557 Bytes
  • 08/03/2007 15:25:39
  • fw1ngr60.sql
  • 1014 Bytes
  • 03/16/2009 08:57:13
List All Files