wIDSard is an host based Intrusion Detection System.
It intercepts syscalls made by the process to monitor at user level
by the ptrace mechanism. It can detect not only single system calls, but even
sequences, ripetition, negation ecc.
Download
widsard - widsard-0.20
Last Update: Apr 03 2006