Free id software for linux

TUR.ID. means TURing human IDentification is a textual, highly accessible alternative to visual CAPTCHAs involving the completion of simple phrases and based on the language recognition features of the user.

SID-IDS is a host intrusion detection system. Shell/PTY Intrusion Detection: Aims at detecting unwanted PTY action on UNIX systems. SID-IDS is a Host Intrusion Detection System. Consists of a kernel part and a user part. The kernel part plugs into terminal processing subsystem and logs hashed terminal lines. The user part reads log entries (hashes) and takes appropriate action when finding unexpected log entries.

SID now supports Solaris SPARC, i386, Linux 2.4 and x86 Linux 2.6.
Please note: the kernel part both for Solaris and Linux 2.4 have not changed since release 0.3.7.
Contains Debian Linux packages for i386 and a build script to create your own binary Debian packages.
Contains Solaris 8 i386 and SPARC packages and a build script to create your own Solaris binary packages.

IDS::Algorithm::MM is a Perl module created to learn or test using a first-order Markov Model (MM).

SYNOPSIS

A usage synopsis would go here. Since it is not here, read on.
In section 4.2 in Kruegel and Vignas paper, they ignored the probability information that the MM provided, and produced a binary result. In effect, they were using the constructed MM as a {N,D}FA.

Someday more will be here.

Ideally, we would be using the algorithm from stolcke94bestfirst. Constructing a DFA rather than a NFA in effect has performed most of the state merging that stolcke93hidden do.

Consider also a java or C/C++ implementaion: http://www.ghmm.org/ http://www.run.montefiore.ulg.ac.be/~francois/software/jahmm/

Useful information: http://www.cs.brown.edu/research/ai/dynamics/tutorial/Documents/HiddenMarkovModels.html http://www.comp.leeds.ac.uk/roger/HiddenMarkovModels/html_dev/main.html L R Rabiner and B H Juang, `An introduction to HMMs, IEEE ASSP Magazine, 3, 4-16.

printvcg

printvcg(filehandle)

Print in a form usable by VCG for printing the DFA.

If the filehandle is specified, print there; otherwise, print to STDOUT.
This code was stolen from DFA, and does not know about the probabilities.
load(filehandle)

Load a MM from a file; this is the inverse of "print", and the format we expect is that used in $self->print.

test(tokensref, string, instance)

Test the string of tokens and calculate the probability of the string being seen. At each stage, we get a p in [0,1]. The result is the product of these probabilities.
Note that if a transition cannot be made, we return a 0 probability.

add(tokensref, string, instance)

The collection of tokens (in the list referenced by tokensref) is a complete example of a list that should be accepted by the DFA.

string and instance are IDS::Test framework arguments that we ignore because we do not need them.

WE add the transition from the last token to the (ACCEPT) state.

add_transition(from, token)

Add a transition from one state to another when the specified token is received. It is not an error to try to add an existing transition. In that event, this function quietly returns. If no such transition exists, we look for a transition on the token; if so, we add an edge to the destination node for the existing edge. Finally, if there is no other choice, we create a new state and add the edge.

generalize()

Reduce the number of states in the model.

Our building a DFA rather than a NFA has in effect performed most of the state merging that would have occurred.

XXX We should still be doing some checks for additional merge possibilities.
XXX A proof that the DFA is effectively the NFA with merged states would be useful.

Lingua::ID::Nums2Words is a Perl module to convert number to Indonesian verbage.

SYNOPSIS

use Lingua::ID::Nums2Words ;

print nums2words(123) ; # "seratus dua puluh tiga"
print nums2words_simple(123) ; # "satu dua tiga"

nums2words currently can handle real numbers in normal and scientific form in the order of hundreds of trillions. It also preserves formatting in the number string (e.g, given "1.00" nums2words will pronounce the zeros).

FUPIDS stands for Fuzzy Userprofile Intrusion Detection System. fupids2 is a child of the FUPIDS project and based on its idea.
FUPIDS is able to detect accounts used by attackers who overtook such an account.
But FUPIDS ran in OpenBSDs Kernelspace and was never applyed in the kernel-code, so i wrote fupids2 as an userspace-version of FUPIDS. I tested fupids2 on Slackware-linux and OpenBSD but it is still beta.
But fupids2 has more features as FUPIDS had. fupids2 calculates an attacker level for every user on all linux/bsd (and hopefully unix systems too) in your network. fupids2 does not only use the tool-using-behavior of every user like FUPIDS did, it also knows about the buildings and rooms an user normaly uses.
fupids2 knows if the user prefers to sit near the window, near the floor or in the backside of the workstation-rooms. But this is not all: fupids2 knows at which times the user is normaly logged into the systems. All these things are included in the (beta) caluclation of the attacker level.
Main features:
- FUPIDS calculates an "attacker level" for every user on your system. It will alert you via syslog if the attacker levels becomes too high and uses an own logfile too.
- FUPIDS has a profile of used programmes for every user. If an user uses to much new programms in a short time, the attacker level raise. this is because an attacker could overtake the account of this user and now uses some new compiled exploits or an editor the normal user never starts.
- fupids2 has an improved attacker-level calculation system (beta) that includes the following things too (and not only the program-using-behavior of the user):
- the time, the user normaly is logged in. fupids can detect if the user was never logged in for a special time before
- the building, etage and room the user is normaly logged in from. if this behavior will change: fupids will detect it.
- fupids knows if the user normaly sits in front, middle or back of a room and if he sits in the window, middle or floor-side of a room. if this will change: fupids will detect it too.
- fupids2 is able to collect network-wide data using the client-shellscript (included in the .tgz-file) and ssh
Enhancements:
- This release includes the day of the week input in the calculation of the attacker level.
- It can detect accounts that are used on unusual days in this way.

Procbind project is a software that lets you bind a process to one or more processors. The process will then only run on those processors.
Install:
make install
Usage:
procbind -h
for help
For everything more or less related to procbind, please feel free to contact me.
Consider using PGP. My PGP key-id is: 0x1f28d8ae
Enhancements:
- Parameter sanity check added

PHP::Session::DB is a Perl module to read / write PHP sessions stored in databases.

SYNOPSIS

use PHP::Session::DB;

my $session = PHP::Session::DB->new($id, { DBUSER => $dbuser, DBPASSWD => $dbpasswd, DBNAME => $dbname });

# session id
my $id = $session->id;

# get/set session data
my $foo = $session->get(foo);
$session->set(bar => $bar);

# remove session data
$session->unregister(foo);

# remove all session data
$session->unset;

# check if data is registered
$session->is_registered(bar);

# save session data
$session->save;

# destroy session
$session->destroy;

# create a new session, if not existent
$session = PHP::Session->new($new_sid, { %dbvars, create => 1 });

PHP::Session::DB provides a way to read / write PHP4 sessions stored on databases, with which you can make your Perl application session shared with PHP4.