List of applications (简体中文)/Security (简体中文)

The printable version is no longer supported and may have rendering errors. Please update your browser bookmarks and please use the default browser print function instead.

常用程序

互联网 – 多媒体 – 工具 – 文档 – 安全 – 科学 – 其它

本文或本节需要翻译。要贡献翻译，请访问简体中文翻译团队。

附注： 请使用模板的第一个参数进行更详细的指示。（在 Talk:List of applications (简体中文)/Security (简体中文)# 中讨论）

安全

For detailed guides, see the main ArchWiki page, Security.

防火墙

See the main article: Firewalls.

网络安全

Arpwatch — Tool that monitors ethernet activity and keeps a database of Ethernet/IP address pairings.

https://ee.lbl.gov/ || arpwatch

Bro — Powerful network analysis framework that is much different from the typical IDS you may know.

https://www.bro.org/ || not packaged? search in AUR

EtherApe — Graphical network monitor for Unix modeled after etherman. Featuring link layer, IP and TCP modes, it displays network activity graphically. Hosts and links change in size with traffic. Color coded protocols display.

http://etherape.sourceforge.net/ || etherape

Honeyd — Tool that allows the user to set up and run multiple virtual hosts on a computer network.

http://www.honeyd.org/ || honeyd^AUR

IPTraf — Console-based network monitoring utility.

https://fedorahosted.org/iptraf-ng/ || iptraf-ng

Kismet — 802.11 layer2 wireless network detector, sniffer, and intrusion detection system.

https://www.kismetwireless.net/ || kismet

Nemesis — Command-line network packet crafting and injection utility.

http://nemesis.sourceforge.net/ || nemesis^AUR

Nmap — Security scanner used to discover hosts and services on a computer network, thus creating a "map" of the network.

https://nmap.org/ || nmap

Ntop — Network probe that shows network usage in a way similar to what top does for processes.

https://www.ntop.org/ || ntop^AUR

Snort — Network intrusion prevention and detection system.

https://www.snort.org/ || snort^AUR

Sshguard — Daemon that protects SSH and other services against brute-force attacts, similar to Fail2ban.

https://www.sshguard.net/ || sshguard

Suricata — High performance Network IDS, IPS and Network Security Monitoring engine.

https://suricata-ids.org/ || suricata^AUR

Tcpdump — Common console-based packet analyzer that allows the user to intercept and display TCP/IP and other packets being transmitted or received over a network.

https://www.tcpdump.org/ || tcpdump

vnStat — Console-based network traffic monitor that keeps a log of network traffic for the selected interfaces.

https://humdi.net/vnstat/ || vnstat

Wireshark — Network protocol analyzer that lets you capture and interactively browse the traffic running on a computer network.

https://www.wireshark.org/ || wireshark-cli wireshark-gtk^{[损坏的链接：replaced by wireshark-qt]}

威胁与漏洞探测

AFICK — Security tool that allows to monitor the changes on your files systems, and so can detect intrusions.

http://afick.sourceforge.net/ || afick^AUR

Lynis — Security and system auditing tool to harden Unix/Linux systems.

https://cisofy.com/lynis/ || lynis

Metasploit Framework — An advanced open-source platform for developing, testing, and using exploit code.

https://www.metasploit.com/ || metasploit

Nessus — Comprehensive vulnerability scanning program.

https://www.nessus.org/products/nessus || nessus^AUR

OpenVAS — Framework of several services and tools offering a comprehensive and powerful vulnerability scanning and vulnerability management solution. FOSS Nessus fork.

https://www.openvas.org/ || openvas^AUR^{[损坏的链接：package not found]}

Osiris — Tool for monitoring system integrity and changes across a network.

https://launchpad.net/osiris || osiris^AUR

OSSEC — Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

https://www.ossec.net/ || ossec-agent^AUR^{[损坏的链接：package not found]} ossec-local^AUR ossec-server^AUR

Samhain — Host-based intrusion detection system (HIDS) provides file integrity checking and log file monitoring/analysis, as well as rootkit detection, port monitoring, detection of rogue SUID executables, and hidden processes.

https://www.la-samhna.de/samhain/index.html || not packaged? search in AUR

Tiger — Security tool that can be use both as a security audit and intrusion detection system.

https://www.nongnu.org/tiger/ || tiger^AUR

Tripwire — Intrusion detection system.

http://tripwire.sourceforge.net/ || tripwire^AUR^{[损坏的链接：package not found]}

文件安全

AIDE — File and directory integrity checker.

http://aide.sourceforge.net/ || aide^AUR

Logcheck — Simple utility which is designed to allow a system administrator to view the logfiles which are produced upon hosts under their control.

https://web.archive.org/web/20180314152834/http://logcheck.alioth.debian.org/ || not packaged? search in AUR

Logwatch — Customizable log analysis system.

https://sourceforge.net/projects/logwatch/ || logwatch

OpenDLP — OpenDLP is a free and open source, agent- and agentless-based, centrally-managed, massively distributable data loss prevention tool.

https://code.google.com/p/opendlp/ || not packaged? search in AUR

Swatch — Utility that can monitor just about any type of log.

http://swatch.sourceforge.net/ || swatch^AUR^{[损坏的链接：package not found]}

反恶意软件

chkrootkit — Locally checks for signs of a rootkit.

http://www.chkrootkit.org/ || chkrootkit^AUR

ClamAV — Open source antivirus engine for detecting trojans, viruses, malware & other malicious threats.

https://www.clamav.net/ || clamav

Linux Malware Detect — Malware scanner designed around the threats faced in shared hosted environments.

https://www.rfxn.com/projects/linux-malware-detect/ || maldet^AUR

Rootkit Hunter — Checks machines for the presence of rootkits and other unwanted tools.

http://rkhunter.sourceforge.net/ || rkhunter

备份

See the main article: Backup programs.

锁屏

警告： Only sflock, physlock, Cinnamon Screensaver, MATE Screensaver and GNOME Screensaver are able to block tty access.

Cinnamon Screensaver — Screen locker for the Cinnamon desktop.

https://github.com/linuxmint/cinnamon-screensaver || cinnamon-screensaver

GNOME Screensaver — Screen locker for the GNOME Flashback desktop.

https://wiki.gnome.org/Projects/GnomeScreensaver || gnome-screensaver^AUR

i3lock — A simple screen locker. Provides user feedback, uses PAM authentication, supports DPMS. The background can be set to an image or solid color.

https://i3wm.org/i3lock/ || i3lock

i3lock-color — Improved i3lock with color customization. The most popular fork of i3lock

https://github.com/Raymo111/i3lock-color || i3lock-color^AUR, i3lock-color-git^AUR

i3lock-blur — Fork of i3lock which can use your desktop with the blur effect applied as a background.

https://github.com/karulont/i3lock-blur || i3lock-blur^AUR

i3lock-wrapper — A simple wrapper around i3lock which sets up a blurred screenshot of the desktop as a background image.

https://github.com/ashinkarov/i3-extras || i3lock-wrapper^AUR^{[损坏的链接：package not found]}

Light-locker — A simple locker (forked from gnome-screensaver) that aims to have simple, sane, secure defaults and be well integrated with the desktop while not carrying any desktop-specific dependencies. It relies on LightDM for locking and unlocking your session via ConsoleKit/UPower or logind/systemd

https://github.com/the-cavalry/light-locker || light-locker

MATE Screensaver — Screensaver and locker for MATE Desktop Environment.

https://github.com/mate-desktop/mate-screensaver || mate-screensaver

physlock — Screen and console locker.

https://github.com/muennich/physlock || physlock

sflock — Simple screen locker utility for X, based on slock. Provides a very basic user feedback.

https://github.com/benruijl/sflock || sflock-git^AUR

slock — Very simple and lightweight X screen locker. Offers only a black background when locked, there are no animations or text fields.

https://tools.suckless.org/slock || slock

sxlock — Fork of sflock with a few enhancements. Provides basic user feedback, uses PAM authentication, supports DPMS and RandR. Supports sxlock.service to lock the screen on suspend/hibernation. See the README for more information.

https://github.com/lahwaacz/sxlock || sxlock-git^AUR

vlock — TTY locker. A mirror of the original vlock is available at github.

http://www.kbd-project.org || kbd

xlockmore — Simple X11 screen lock with PAM support.

https://sillycycle.com/xlockmore.html || xlockmore

XScreenSaver — Screen saver and locker for the X Window System.

https://www.jwz.org/xscreensaver/ || xscreensaver

XSecureLock — X11 screen lock utility designed with the primary goal of security.

https://github.com/google/xsecurelock || xsecurelock-git^AUR

Hash 校验

GtkHash — 生成摘记，计算校验的 GTK+ 工具

http://gtkhash.sourceforge.net/ || gtkhash^AUR

hashdeep — 可对多文件计算 Hash, 生成摘记，跨平台的工具。

http://md5deep.sourceforge.net/ || hashdeep

Parano — 用于生成、编辑和校验 MD5 和 SFV 文件的 GNOME 前端

http://parano.berlios.de/ || parano^AUR^{[损坏的链接：package not found]}

RHash — Hash 校验工具，支持 SFV, CRC 等等，支持众多算法

http://rhash.sourceforge.net/ || rhash

Quick Hash GUI — 可在文本或硬盘递归地快速进行 Hash 的 GUI 工具

https://sourceforge.net/projects/quickhash/ || quickhash^AUR^{[损坏的链接：package not found]}

RHash — Utility for verifying hash sums (SFV, CRC, etc). Supports lots of algorithms.

https://github.com/rhash/RHash || rhash

MassHash — A set of file hashing tools (both CLI and GTK+ GUI) written in Python. Supported algorithms include MD5, SHA-1, SHA-224, SHA-256, SHA-384, SHA-512.

https://jdleicher.github.io/MassHash/ || masshash^AUR

加密，签名与信息隐藏

ccrypt — A command-line utility for encrypting and decrypting files and streams.

http://ccrypt.sourceforge.net/ || ccrypt^AUR

GnuPG — The GNU project's complete and free implementation of the OpenPGP standard as defined by RFC4880. Free and Open Source replacement of PGP, mostly used for digital signing of packages.

https://gnupg.org/ || gnupg

gzsteg — A utiltiy that can hide data in gzip compressed files

https://www.nic.funet.fi/pub/crypt/steganography/ || not packaged? search in AUR

silenteye — A steganography application written in C++, use Qt4 library.

http://www.silenteye.org/ || not packaged? search in AUR

snow — Steganography program for concealing messages in text files

http://www.darkside.com.au/snow/ || snow^AUR^{[损坏的链接：package not found]}

steghide — A steganography utility that is able to hide data in various kinds of image and audio files.

http://steghide.sourceforge.net || steghide^AUR

stegparty — A steganography utility hides text by typoing text existing text files.

https://github.com/countrygeek/stegparty || stegparty^AUR^{[损坏的链接：package not found]}

密码管理

Console Password Manager — Curses based password manager using PGP-encryption.

https://github.com/comotion/cpm || cpm^AUR^{[损坏的链接：package not found]}

Figaro's Password Manager 2 — GTK2 port of Figaro's Password Manager with some new enhancements.

https://als.regnet.cz/fpm2/ || fpm2^AUR

GPass — Password manegement software for GNOME2 desktop.

https://web.archive.org/web/20140916215028/http://projects.netlab.jp/gpass/ || gpass^AUR

GPassword Manager — Simple, lightweight and cross-platform utility for managing and accessing passwords.

https://sourceforge.net/projects/gpasswordman/ || gpasswordman^AUR^{[损坏的链接：package not found]}

Gtkpass — Gtkpass is a GTK and Libkpass-based password manager for KeePass 1.x databases.

https://sourceforge.net/projects/gtkpass/ || gtkpass^AUR^{[损坏的链接：package not found]}

Ked Password Manager — A password manager that helps to manage large numbers of passwords.

http://kedpm.sourceforge.net || kedpm^AUR

KeePass Password Safe — Free open source Mono-based password manager, which helps you to manage your passwords in a secure way.

https://keepass.info/ || keepass

KeePassC — KeePassC is a curses-based password manager compatible to KeePass v.1.x and KeePassX.

https://raymontag.github.com/keepassc^{[失效链接 2021-05-17 ⓘ]} || keepassc^AUR

KeePassX — Free and open source Qt-based password manager (uses KeePass 1.x databases for storage).

https://www.keepassx.org/ || keepassx^AUR

MyPasswords — What you need for managing your passwords, including the passwords of your online accounts, bank accounts and ... with the corresponding URLs.

https://sourceforge.net/projects/mypasswords7/ || not packaged? search in AUR

MyPasswordSafe — Easy-to-use QT based password manager, compatible with Password Safe files (and therefore pwsafe).

https://www.semanticgap.com/myps/ || mypasswordsafe^AUR^{[损坏的链接：package not found]}

Pasaffe — Easy to use password manager for Gnome with a Password Safe 3.0 compatible database.

https://launchpad.net/pasaffe || pasaffe^AUR

pass — Simple console based password manager

https://www.passwordstore.org/ || pass

Password Gorilla — A cross-platform password manager.

https://github.com/zdia/gorilla/wiki/ || password-gorilla^AUR gorilla^AUR^{[损坏的链接：package not found]}

Password Safe — Simple and secure password manager.

http://passwordsafe.sourceforge.net/ || passwordsafe^AUR

pwsafe — Unix commandline program that manages encrypted password databases.

http://nsd.dyndns.org/pwsafe/ || pwsafe^AUR

QPass — Easy to use password manager with built-in password generator.

http://qpass.sourceforge.net || qpass^AUR

Revelation — Password manager for the GNOME desktop.

https://revelation.olasagasti.info/ || revelation^AUR

Seahorse — GNOME application for managing encryption keys and passwords in the GnomeKeyring.

https://wiki.gnome.org/Apps/Seahorse || seahorse

Universal Password Manager — Allows you to store usernames, passwords, URLs and generic notes in an encrypted database protected by one master password.

http://upm.sourceforge.net/ || upm^AUR^{[损坏的链接：package not found]}