Be the first to post a text review of antispyd. Rate and review a project by clicking thumbs up or thumbs down in the right column.

• Major improvements propositions

  I read more and more mail about the fact the development of the antispyd project has stop for more than six months. However I always think about improvement for the project and I now imagine new features that has NEVER been developed in commercial solutions of corporation malware and inappropriate web use filtering. In fact, I start to build this software when I was in an engineer school, now I am a PhD candidate in machine learning and I think can develop some really cool features : - detection of pornographic pictures - Ultra fast probabilistic URL matching for matching of unspecified URL However I wish to know how many people could be interested by those new features. So I'm waiting for your mail for that. Best Regards, -- Julien Perez. <jnm42@users.sourceforge.com>

  posted by jnm42 1125 days ago

• objectives for antispyd-0.1

  I wish to provide a first stable release for this version, so I need HELP !!! Please send me bug notifications and wishlist for the future of this project. Moreover, I wish to provide a first list of signature of known web threats, so I need your participation too !!! Thank you in advance :) Regards, -- Julien <jnm42@users.sourceforge.net>

  posted by jnm42 1474 days ago

• antispyd-0.0.9 released

  This release provides a major improvement of the signature based filtering engine ( the BLOCK_SIGN filter), term of performance and functionnality. The signatures are now stored in a 3-Tree to enhance the matching of each HTTP message. Morevorer, this filtering can now be performed on each HTTP message content. Finally, a signature can now use hexadecimal array of byte to specify a field's value. For more informations ans samples, See the man page :) Regards, -- Julien <jnm42@users.sourceforge.net>

  posted by jnm42 1475 days ago

• antispyd antispyd-0.0.9 file released: antispyd-0.0.9.tar.gz

  posted 1475 days ago

• File released: /antispyd/antispyd-0.0.9/antispyd-0.0.9.tar.gz

  posted 1475 days ago

• Objectives for antispyd-0.0.9

  I'm going to clean up and enhance the signature based threat detection engine (BLOCK_SIGN). The main goals are : - Speed up the signature checking : The signatures will be stored in a 3-Tree to drastically reduce the number of test for each HTTP message. - Enhance the signature definition: A signature will be composed of 3 definition parameters : "url", "fld", "content" and an optional parameter "shape", to allow admins to specify what action to perform when a signature is matched. Moreover, It will be possible to specify hexadecimal characters in the 3 definition fields of a signature. Another purpose of this release will be the improvement of the shellcode detection algorithm. Primarily, the objective is to effectively support shellcodes detection in hexa-encoded URLs. Regards, -- Julien <jnm42@users.sourceforge.net>

  posted by jnm42 1479 days ago

• antispyd-0.0.8 released

  This release provide two aspects : - the capability of inter-connection with others HTTP cache and proxy, via a new configuration directive : "cache_peer" (I know you know it :) ) and "direct_connect" directive for fault tolerance. - An HTTP engine acceleration via the use of the N-Tree algorithm for HTTP header fast reconnaissance. Regards, -- Julien <jnm42@users.sourceforge.net>

  posted by jnm42 1481 days ago

• antispyd antispyd-0.0.8 file released: antispyd-0.0.8.tar.gz

  posted 1481 days ago

• File released: /antispyd/antispyd-0.0.8/antispyd-0.0.8.tar.gz

  posted 1481 days ago

• Objectives for antispyd-0.1 : Stability and Effectiveness

  The main goal of this release will be to provide a stable software package. So, I will now work on some part of the code to increased usuability of the project like the configuration system and log system, to provide a more comprehensive error checking and log monitoring. Moreover, I have already speed up the HTTP parsing system with the use of "Valued N-Tree" for the header type reconnaissance problem. Some other improvements have to, and will be, done. Then, after version 0.1 completed, I wish to work on some non-determinist filters, like - traffic anomaly detection - porn image reconnaissance (I'm already working on it, but it's a secret :) ) Regards, -- Julien <jnm42@users.sourceforge.net>

  posted by jnm42 1482 days ago