EH-Net

ReL1K (Dave Kennedy) has got some new toys in the works -

http://thehackernews.com/2012/02/confusing-attackers-with-artillery-by.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+TheHackersNews+%28The+Hackers+News+-+Daily+Cyber+News+Updates%29 (http://thehackernews.com/2012/02/confusing-attackers-with-artillery-by.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+TheHackersNews+%28The+Hackers+News+-+Daily+Cyber+News+Updates%29)

Are you referring to Artillery? If so, it has been around for quite some time  :) (More than a month, which is long in "Internet time" xD)

But thanks for sharing it as I'm sure many can benefit from this tool  :) Personally, I've used it on a few servers and it does work quite well on preventing external threats from perhaps, reaching your assets if the first thing they do is to port scan you.

Of course, they can just use a proxy, vpn, etc., but it's quite nice and it does protect against the most common script kiddies  ;) The file integrity checks are a bit resource intensive with directories containing a large amount of files, but it works, even though it still has a few things I'd like to see fixed / improved, such as being able to better include and exclude certain directories to monitor  :) (When you have a long list of directories, it would be nice to include them line by line, instead of just one line  ;D )

<nod> Yes, I am.  I was aware of it previously, as well, having discussed it and toyed (a little) with it, previously, with Dave, too.   But today, I figured I finally saw this from Dave, hitting mainstream media, so thought I'd shout out for others to tinker with, too.

That said, you're right on the file integrity piece.  I'd noticed my box bogging down a bit more than usual.  But I'm sure Dave will be happy to take suggestions for this 'side project,' in order to better it. <hint> (if you haven't already...)

At least I'm glad I'm not the only one  ;D (I turned off the feature and thought it would probably be improved in later versions anyway.)

I didn't suggest it though, as I guess he probably and already know there's room for improvement or someone else told him this particular feature could be improved, so yeah, it's a large assumption but I think it'll be improved sooner or later anyway  :)

Thanks for the link