Our team is excited to share the latest news and features of Slips, our behavioral-based machine learning intrusion detection system.

Quick links:

What We Are Particularly Excited About

In this release we are particularly excited about these new Slips features:

- Enhance Slips shutdown process for smoother operations.

- Optimize resource management in Slips, resolving issues with lingering threads in memory.

- Remove the progress bar; Slips now provides regular statistical updates.

- Improve unit testing—special thanks to @Sekhar-Kumar-Dash.

- Drop support for macOS, P2P, and platform-specific Docker images. A unified Docker image is now available for all platforms.

- Correct the number of evidence reported in statistics.

- Fix incorrect end date reported in metadata/info.txt upon analysis completion.

- Print more information to CLI on Slips startup, including network details, client IP, thresholds used, and more.

- Reduce false positives from Spamhaus by looking up inbound traffic only.

- Speed up horizontal port scan detections.

- Enhance logging of IDMEF errors.

- Resolve issues with the accumulated threat level reported in alerts.json.

Check the full list of changes in our release page: https://github.com/stratosphereips/StratosphereLinuxIPS/releases/tag/v1.1.3

Learn more!

Wondering what Slips is capable of? Check out these demo presentations:

For those interested in contributing to Slips:

Feel free to join our Discord server and ask questions, suggest new features or give us feedback. PRs and Issues are welcomed in our repo.