Home

AIP (Attacker IP Prioritizer) is a framework developed at the Stratosphere Laboratory to process input network flows from honeypots and output a blocklist feed that can be used to block incoming attacks. AIP was born out of the need to generate small, compact, and effective blocklist feeds for IoT devices that usually cannot load hundreds of thousands of IPs to block. Originally developed by Thomas O'Hara for his bachelor thesis, the project was re-engineered, improved and further developed by Joaquin Bogado.

Usage

• Build Docker Image from Source
• Run AIP through Docker

Models

• Prioritizers Models
• Alpha Models
• Random Forest Model