nist800-53 开源项目推荐（51 个）

ossec /ossec-hids

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

bmarsh9 /gapps

安全合规平台——SOC2、CMMC、ASVS、ISO27001、HIPAA、NIST CSF、NIST 800-53、CSC CIS 18、PCI DSS、SSF 跟踪

center-for-threat-informed-defense /attack-control-framework-mappings

🚨ATTENTION🚨 The NIST 800-53 mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept here as an archive.

theopenlane /core

Open source compliance automation for SOC 2, GDPR, ISO27001, NIST 800-53, and more

oscal-compass /compliance-trestle

An opinionated tooling platform for managing compliance as code, using continuous integration and NIST's OSCAL standard.

mikeprivette /NIST-to-Tech

An open-source listing of cybersecurity technology mapped to the NIST Cybersecurity Framework (CSF)

telophasehq /telophasecli

Open Source AWS Control Tower

kosli-dev /secure-sdlc-process-template

Secure SDLC process template

Atomicorp /openvas-docker

A docker container for openvas

awslabs /security-hub-compliance-analyzer

A compliance analysis tool which enables organizations to more quickly articulate their compliance posture and also generate supporting evidence artifacts

counteractive /security-controls

该项目在 GitHub 上没有填写描述

ollionorg /gcp-landing-zone

Leverage Ollion's GCP Landing Zone to deploy a secure, compliant foundation with ease. The repository contains an implementation of a secure and compliant landing zone pattern that will help expedite cloud migration for an enterprise in a heavily regulated industry.

theopenlane /openlane-ui

the openlane ui - holds the openlane console

Hack23 /sonar-cloudformation-plugin

Sonarqube cloudformation plugin, IaC security supports cfn-nag/checkov

0xbythesecond /Azure-SOC-Honeynet-Project

Built a mini HoneyNet in Azure and ingest log sources from various resources into a Log Analytics workspace

AbeWinters /control-mappings

Overview of existing mappings from and to cyber security controls

Atomicorp /nginx-waf-docker

docker modsecurity reverse proxy WAF based on nginx

perlogix /cmon

NIST Information Security Continuous Monitoring (ISCM) and configuration baseline data collector

Atomicorp /ossec-docker

Official OSSEC docker container

autostructure /secure_windows

Puppet module that hardens Windows Server to DoD STIG compliance