Intrusion Detection/Prevention for home users?

[Notok]

Looking around for a host based IDS/IPS', all you can really find are articles saying that you really need one (without any examples), network/enterprise level software, integrity checkers, BlackICE, and Prevx. Does anyone know of anything else for home desktop systems, or is there currently really that little innovation in this area? The Prevx guys made mention of competition at one point, but do they really even have any competition in the desktop market?

Principal AntiVirus almost qualifies as more of an IPS, but $70 just isn't anywhere near reasonable.. at least not for me, and not right now.

Thanks in advance for any suggestions.

[nadirah]

Try PrevX from www.prevx.com (http://www.prevx.com)
and for a good firewall i strongly recommend Sygate personal firewall pro from www.sygate.com (http://www.sygate.com)

[gerardwil]

How about a Firewall?

[gerardwil]

You can find Attacker here:

http://www.foundstone.com/index.htm?subnav=resources/navigation.htm&subcontent=/resources/freetools.htm

[VikingStorm]

Well I suppose
http://www.finjan.com is in that category.

[bellgamin]

BlackICE *might* fit your needs. Per their website...

-{ Quote: "BlackICE PC Protection offers:
# Professional-strength protection from hackers for your home PC
# An advanced Intrusion Detection System (IDS) Plus a Firewall!" }-

Have a look at...
http://www.blackice.com/PCProtection-Firewall.htm

[Moore]

Hi Notok , there dont seem to that many HIDS available , mostly NIDS , but this might give you some more places to look at :

http://www.bluetack.co.uk/index.php?showtopic=1195

Besides using a decent firewall theres programs that monitor ports like this one :

-{ Quote: "- Back Officer Download:

- http://www.nfr.com/resource/backOfficer.php

Free - Back Officer Friendly "honeypot" attracts and traps attackers
Known as a "honey pot" for its ability to attract and trap hackers,
Back Officer Friendly (BOF) is a popular free download available exclusively from NFR Security, Inc.

Back Officer Friendly was originally created to detect when anyone attempts a Back Orifice scan against your computer.

It has since evolved to detect attempted connections to other services, such Telnet, FTP, SMTP, POP3 and IMAP2.

When BOF receives a connection to one of these services,
it will fake replies to the hopeful hacker, wasting the attacker's time,
and giving you time to stop them from other mischief.

you will need to fill in a form and a link will be sent to you via email to download the program." }-

[JacK]

-{ Quote: "Hi Notok , there dont seem to that many HIDS available , mostly NIDS , but this might give you some more places to look at :

http://www.bluetack.co.uk/index.php?showtopic=1195

Besides using a decent firewall theres programs that monitor ports like this one :" }-

Hello,

I strongly should advise not using honeypots.

[Moore]

Yeah I'm sure I would prefer a firewall , but that program above is hardly a honeypot though , it's similar to using the TDS-3 sockets function.

[se7engreen]

Tiny Firewall 6
I attached a screenshot of the IDS, it might be worth looking into.
Also SNORT is free if you can use a command line IDS.

[meneer]

Get an old pc to install a linux based firewall router NIDS system. Smoothwall, IPcop and SME server come to mind. Most of them offer snort with acid as standard or optional function.