OSSIM – feature-rich open source SIEM

Last Updated on April 3, 2025

OSSIM (Open Source Security Information and Event Management) is an open source security information and event management system, integrating a selection of tools designed to aid network administrators in computer security, intrusion detection and prevention.

This SIEM is complete with event collection, normalization and correlation. The software was created specifically to address the reality many security professionals face.

OSSIM is free and open source software.

Features include:

• Asset discovery.
• Vulnerability assessment.
• Intrusion detection.
• Behavioral monitoring.
• SIEM event correlation.
• OSSIM features the following software components:
  • PRADS, used to identify hosts and services by passively monitoring network traffic.
  • Snort, used as a popular network intrusion detection system (IDS), and also used for cross correlation with OpenVAS.
  • Suricata, used as an IDS. Suricata also offers intrusion prevention, network security monitoring and PCAP processing.
  • Nagios, used to monitor hosts and specified ports for asset availability as well as full local system monitoring.
  • Tcptrack, used for session data information which can grant useful information for attack correlation.
  • Munin, for traffic analysis and service watchdogging.
  • NFSen/NFDump, used to collect and analyze NetFlow information.
  • FProbe, used to generate NetFlow data from captured traffic.
  • OpenVas, is used for vulnerability assessment and associated to assets.
  • OSSIM also includes self developed tools, the most important being a generic correlation engine with logical directive support and logs integration with plugins.

Website: Website gone
Support:
Developer: AT&T Cybersecurity
License: GNU General Public License

Explore Linux
	Best Free and Open Source Software - A huge collection of recommended free and open source software covering every major category.
	In-depth Linux Software Reviews - Detailed assessments of Linux software covering features, usability and overall quality.
	The Big List of Active Linux Distros - An extensive collection of actively developed Linux distributions.
	Open Source Alternatives - Alternatives to software and services from Google, Microsoft, Apple, Adobe, IBM, Autodesk, Oracle and others.
	Essential Linux System Tools - Indispensable utilities for monitoring, maintaining and managing Linux systems.
	Linux Productivity Tools - Useful utilities for improving productivity and streamlining everyday tasks.
	Alternatives to Popular CLI Tools - Modern alternatives to familiar command-line utilities supplied with Linux systems.
	Awesome Free Linux Game Tools - Tools, utilities and companion software that improve gaming on Linux.
	Machine Learning on Linux - Machine learning and deep learning software, self-hosted applications and practical tools.
	Saving Money with Linux - Practical ways to reduce electricity consumption and lower computing costs with Linux.
	Linux Candy - Fun, entertaining and sometimes delightfully quirky software from the lighter side of Linux.