KFSensor

KFSensor Professional is an advanced piece of software designed to mimic a honeypot that identifies and attracts hackers attempting to infiltrate your computer by making the system services look vulnerable. It contains comprehensive options and configuration settings dedicated to experienced users, such as network administrators.

The installation procedure does not take a long time time to finish. However, it requires a system restart. As far as the interface is concerned, KFSensor adopts a regular window with a plain and simple layout.

At startup it pops up a wizard to guide you toward the initial configuration. So, you can select the port classes to include between the Windows workstations, server, Internet services and applications, along with Linux (services not usually found in Windows), Trojans and worms.

In the next steps you can choose ports with active native services, specify a domain name, as well as enable email notifications to send alerts (sender and receiver addresses).

In addition, it is possible to configure settings pertaining to the denial of service (controls how many events are recorded before the server is locked), port activity time (how long a port should indicate activity after an event), proxy emulation (controls if KFSensor is allowed to make limited external connections), and network protocol analyzer. Last but not least, you can install KFSensor as a systems service.

Examine and export event data, add visitor rules and scenarios

All events are shown in the main frame and you can study the start time, duration, protocol, sensor port, name, visitor, and signature message. Additional event details may be investigated as well as exported to file.

Plus, you can create visitor rules by indicating the IP range, host DNS name, protocol, sensor IP and port, visitor port, minimum and maximum number of allowed connections, actions (close, ignore) and severity level.

Moreover, you can create multiple scenarios, edit their properties and easily switch through them, create and configure signatures, alter DOS attack settings, log activity to file, and much more.

There were no stability issues in our tests, since the app did not hang, crash or pop up error messages. Surprisingly, it uses low CPU and RAM, so it does not hog system resources. Thanks to its extensive range of options and configuration settings dedicated to protecting machines from Internet-based attacks, KFSensor Professional should meet the requirements of most users.KFSensor is a host based Intrusion Detection System (IDS).
It acts as a honeypot to attract and detect hackers by simulating vulnerable system services and trojans.
The system is highly configurable and features detailed logging, analysis of attacks and security alerts.
This approach complements other forms of security and adds another defense against the growing security threat faced by all organizations.

If you’re worrying about hacker intrusions, computer worms and Trojans, or want to improve your computer’s network security, or would like to have a professional invasion monitoring system of your own. In cases like these, KeyFocus‘ KFSensor may be just what you need.

KFSensor is a highly configurable and professional Intrusion Detection System (IDS) for Windows. It’s able to act as a honeypot to attract and detect attacks from hackers, Trojans and viruses by simulating vulnerable system services (FIP, POP3, HTTP, SMTP, …) and Trojans. Also, it’s very easy to use and provides real-time monitoring service and detailed safety inspection reports.

On the one hand, KFSensor is able to detect the vulnerabilities of local computer by simulating hacking and Trojan intrusion behaviors, then gives detailed security reports. On the other hand, its intrusion monitoring function can monitor local computers in real time. Once it appears that your computer has been hacked or intruded, this program will immediately issue a system alarm, and at the same time, it makes comprehensive analysis to the attacker or intruder and generates a detailed analysis report too.