Say hello to PHPIDS 0.4.1
Article written by .mario
It’s not that long ago that we released PHPIDS 0.4 but nevertheless this release brings some very interesting new features you may like. To make things short - here’s a list:
- Getter and setter methods for the config array
- Several completely reworked rules - thanks to the heavy testing in the PHPIDS Group
- Way less false alerts, more true ones with fewer rules
- A pretty new feature called ‘PHPIDS Centrifuge BETA’
- More tests and better coverage
- Simplification of the settings for the Caching features
- Several minor bug fixes
The PHPIDS Centrifuge BETA is basically a new method in the Converter class which is able to detect unknown attack patterns not covered by the rules yet. This is performed via acting on incoming and suspicious string like a centrifuge- stripping all uninteresting characters, normalizing some others and finally having a result that is very short and reflects around 75% to 85% of the attack vectors we tried during testing - and we tried a bunch of. We are still testing and enhancing that feature so the minimum amount of chars for a string to be mangled by the Centrifuge is set to 80. Thanks Martin and Gareth for your help with the testing.
Furthermore many users requested the possibility to have a setter for the config array inside the Init object. This is also included in this release and opens the 0.5 sprint we named ‘Usability & Scalability’.
We hope as always that you like this release and thank you for your support. You will find the download packages here.
This entry was posted
on Monday, September 24th, 2007 at 10:06 pm and is filed under PHPIDS.
You can follow any responses to this entry through the RSS 2.0 feed.
You can leave a response, or trackback from your own site.
