ImSafe (Immune Security For your Enterprise) is a host-based intrusion detection tool. After a learning phase, it is able to detect changes in processes behavior, to detect buffer overflows, etc. It is implemented through a device driver (as a kernel patch) for the Linux kernel, but can also be run on other UNIX systems by using a "sensor" built upon strace.
Minirighi is a multi-threading, Open Source operating system written for didactic purposes. It has been written from scratch and it is compatible with POSIX. The main feature of Minirighi is its light kernel, whose source code is easy for a person to read, unlike many other Open Source kernels.
The Objex Project (like the GNU Project) aims to develop a complete operating system composed of free and open source software. In contrast to the GNU Project, it aims to build a modern system that brings together all the recent advances in computer science, instead of a Unix-like system. "A complete system" means that it will include the kernel, a full suite of developers tools, user utilities, and a graphical user interface. It is based on OSKit, a framework and a set of utilities, drivers, and program code intended for operating system creation.
The Torque Network Library is a robust, secure, and easy-to-use cross-platform C++ networking API designed for high performance simulations and games. It features a UDP- based connection architecture with DoS prevention functionality, different types of data guarantee, bit stream compression, server object replication and updating, and a simple, highly space efficient RPC mechanism. It includes a deterministic application journaling replay function for eliminating hard to find networking bugs.
Unicornscan is an information gathering and correlation engine. It was designed to provide an engine that is scalable, accurate, flexible, and efficient. Unicornscan is an attempt at a user-land distributed TCP/IP stack. It is intended to provide a researcher with a superior interface for introducing a stimulus into and measuring a response from a TCP/IP enabled device or network.
YASP is a simple and open protocol for building networks with small microcontrollers. It is designed to have a small footprint for easy implementation with minimal hardware resources, but without sacrifice advanced features and future growth. The protocol scalability is implemented using variable length fields. The physical layer use the NRZ encoding as in RS-232, but using dominant and recessive bus states to provide a reliable way to detect collisions.
Libconnect is a simple library wrapper written in assembly language that intercepts the calls applications make to establish TCP connections and transparently proxies them as necessary. Existing applications can use this library without any recompilation or modification. If you provide multiple proxies they will be cycled connection after connection.
vpnd is a daemon which connects two networks on network level either via TCP/IP or a (virtual) leased line attached to a serial interface. All data transfered between the two networks are encrypted using the unpatented free Blowfish encryption algorithm with a key length of up to 576 bits (may be downgraded to a minimum of 0 bits to suit any legal restrictions).