This project aims to create a Snort-based Intrusion Detection System (STS) using Docker. The project simulates various attack scenarios to detect abnormal network traffic and potential attacks, and provides package management with a user-friendly interface.
-
Installing Snort with Docker: Provides portability and isolation by running Snort inside a Docker container.
-
Simulation of Attack Scenarios: Simulates different types of attacks (e.g. DoS, port scanning) and observes how Snort detects these attacks.
-
User Interface: Provides package management and analysis with a user-friendly interface.
- Install Docker. To install Docker, you can download and install the version suitable for your operating system from the official Docker website.
- Clone this repo:
- Clone this copy: ```bash git clone https://github.com/SUmidcyber/BreachWatch.git
Usage Snort Configuration: Configure Snort by editing snort.conf file.
Docker Commands
docker version
docker info