SSHCure is an Intrusion Detection System for SSH, developed at the University of Twente. It allows analysing large amounts of flow data and is the first IDS capable of identifying actual compromises. Being deployed in various networks, ranging from small Web-hosting companies to nation-wide backbone networks, SSHCure has proven to be a stable system in high-speed networks.
We see an increasing number of SSH attacks.
more here................https://labs.ripe.net/Members/luuk_hendriks/sshcure-ssh-intrusion-detection-using-netflow-and-ipfix
We see an increasing number of SSH attacks.
more here................https://labs.ripe.net/Members/luuk_hendriks/sshcure-ssh-intrusion-detection-using-netflow-and-ipfix