Slashdot Mirror

← Back to Stories (view on slashdot.org)

OpenBSD Gains "Fuzzy" User Profiling IDS

Posted by timothy on from the and-who-the-hell-are-you dept.

NaveWeiss writes "According to the OpenBSD Journal, major work has been done on an innovative new OpenBSD feature termed 'fuzzy user profile' intrusion detection system' - or 'fupids.' According to Steffen Wendzel, the code 'creates profiles for every user who does an execve() syscall on obsd systems.'"

5 of 54 comments (clear)

  1. Re:Link? by OldMiner · · Score: 3, Informative

    Oh, it really is hard to click on the link on the linked page, or, even worse, search Google for FUPIDS and find the page in, as he puts it, "my poor English". Pretty sparse on details when you get to it anyhow. Use the source, Luke.

    --
    You like splinters in your crotch? -Jon Caldara
  2. Courtest of Babelfish by thelaw · · Score: 3, Informative

    FUPIDS (fuzzy user of profiles intrusion detection system) is a Patch for the OpenBSD -- Kernel. FUPIDS produces user profiles and supervises their activities. Momentarily is limited to the evaluation of the programs used by the user, however still by some intelligent ueberwachungsstrategien will extend. Which I still planned at nice features experience one as soon as I it programmed and/or for any reasons directly into the ton DO -- list on the project side wrote.

    babelfish.

    --
    -- http://www.cerastes.org
    1. Re:Courtest of Babelfish by chthonicdaemon · · Score: 2, Informative

      Looks like supervisory strategies to me (my german is not great).

      --
      Languages aren't inherently fast -- implementations are efficient
  3. Fupids is not in OpenBSD's tree by OttoM · · Score: 3, Informative
    The summary suggests fupids is imported into the OpenBSD tree.

    This is not true. Fupids is work by a single person, who is not an OpenBSD developer. At this point in time, nothing suggests it will be put into the OpenBSD tree.

  4. NOT in the tree by Geekboy(Wizard) · · Score: 2, Informative

    This code is not in the tree, and it doesn't look like it will be.