Intrusion Detection Python Packages

idstools

idstools: Snort and Suricata Rule and Event Utilities in Python (Including a Rule Update Tool)

fgex

Firegex, a firewall for Attack-Defense CTFs

pysad

Streaming Anomaly Detection Framework in Python (Outlier Detection for Streaming Data)

firegex

Firegex, a firewall for Attack-Defense CTFs

acrawriter

Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.

pcap2tensor

PCAP → ML tensor extraction for network intrusion detection research.

isconna

Python porting of the Isconna algorithm.

pyhids

A host-based intrusion detection system.

secgate

One-command Linux server security gateway: auth gateway + attack dashboard + vulnerability scanner + AI assistant. 一条命令部署的 Linux 服务器安全网关：认证网关 + 攻击看板 + 漏洞扫描 + AI 助手

aegis5

Aegis-5: Adaptive hybrid ensemble framework for intrusion detection in Industry 5.0 — ACM TAAS 2026

graphids

Graph-based cloud intrusion detection using GCN, Transformer autoencoder, and contrastive learning — Scientific Reports 2025

unavoids

Official repo of the article: W. A. Yousef, I. Traoré and W. Briguglio, "UN-AVOIDS: Unsupervised and Nonparametric Approach for Visualizing Outliers and Invariant Detection Scoring," in IEEE Transactions on Information Forensics and Security, vol. 16, pp. 5195-5210, 2021, doi: 10.1109/TIFS.2021.3125608.