Suricata IDS for CoAP
Budget: €250 – €750 EUR
Build a coap parser engine in suricata using rust programming and include the the coap protocol in configuration of suricata. Then create rules for coap specially for dos attacks. Logs the attacks and send alerts in suricata.
Requirements:
I have a virtual box with kali linux machine with-2021 with debian 64 version. Using aiocoap i have build a coap server. I have installed suricata on kali linux machine.(Reference:https://aiocoap.readthedocs.io/en/latest/installation.html)
You can use scripts/setup-app-layer.py to create the boilerplate code for a new app-layer parser. This basically just customizes the template at rust/src/applayertemplate for you in a separate directory to implement your own logic in. I suggest to take a look at the other protocol parsers in rust/src to get a feeling for how things are done.(Reference: https://suricata.readthedocs.io/en/latest/devguide/index.html is useful, https://suricata.readthedocs.io/en/latest/devguide/index.html)
I want you to share the files and details of what and how you did it. Also, the updates files you made it suricata.
Requirements:
I have a virtual box with kali linux machine with-2021 with debian 64 version. Using aiocoap i have build a coap server. I have installed suricata on kali linux machine.(Reference:https://aiocoap.readthedocs.io/en/latest/installation.html)
You can use scripts/setup-app-layer.py to create the boilerplate code for a new app-layer parser. This basically just customizes the template at rust/src/applayertemplate for you in a separate directory to implement your own logic in. I suggest to take a look at the other protocol parsers in rust/src to get a feeling for how things are done.(Reference: https://suricata.readthedocs.io/en/latest/devguide/index.html is useful, https://suricata.readthedocs.io/en/latest/devguide/index.html)
I want you to share the files and details of what and how you did it. Also, the updates files you made it suricata.