Intrusion Detection System Project

This project aims to create a Snort-based Intrusion Detection System (STS) using Docker. The project simulates various attack scenarios to detect abnormal network traffic and potential attacks, and provides package management with a user-friendly interface.

Features

• Installing Snort with Docker: Provides portability and isolation by running Snort inside a Docker container.

• Simulation of Attack Scenarios: Simulates different types of attacks (e.g. DoS, port scanning) and observes how Snort detects these attacks.

• User Interface: Provides package management and analysis with a user-friendly interface.

Installation

1. Install Docker. To install Docker, you can download and install the version suitable for your operating system from the official Docker website.
2. Clone this repo:
3. Clone this copy: ```bash git clone https://github.com/SUmidcyber/BreachWatch.git

Usage Snort Configuration: Configure Snort by editing snort.conf file.

Simulate Attack Scenarios: Simulate different types of attacks and observe how Snort detects them.

Using Interface: Perform package management and analysis through user-friendly interface.

Docker Commands

Checking Docker Version:

docker version

Viewing Docker Information:

docker info