And while we’re on the subject

Note To Self: take a look at firekeeper – project page, project weblog.

Firekeeper is an Intrusion Detection and Prevention System for Firefox. It is able to detect, block and warn the user about malicious sites. Firekeeper uses flexible rules similar to Snort ones to describe browser based attack attempts. Rules can also be used to effectively filter different kinds of unwanted content.
Other features of Firekeeper include:

* Ability to scan incoming Firefox traffic – HTTP(S) response headers, body and URL and to cancel processing of suspicious responses.
* HTTPS and compressed responses are scanned after decryption/decompression.
* Very fast pattern matching algorithm (taken directly from Snort).
* Interactive alerts that give an ability to choose a response to detected attack attempt.
* Ability to use any number of files with rules and to automatically load files from remote locations.

This work, unless otherwise expressly stated, is licensed under a Creative Commons Attribution 3.0 Unported License.

Related posts:

1. Firefox 3 Beta 2 – Not so fast
2. The US-CERT Bulletin Debacle
3. USN Analysis and Proactive Security