Shadow Daemon is a collection of tools to detect , record and prevent attacks on web application. Technically speaking, Shadow Daemon is a web application firewall that intercepts requests and filters out malicious parameters. It is a modular system that separates web application, analysis and interface to increase security, flexibility and expandability.
This is the main component that handles the analysis and storage of requests.
For the full documentation please refer to shadowd.zecure.org .
Use cmake to configure and prepare the project. It is a good idea to create a separate directory for this. A typical installation might look like this.
cmake -DCMAKE_INSTALL_PREFIX:PATH=/usr -DCMAKE_BUILD_TYPE=Release ..
If cmake is successful it creates a makefile. Use it to compile and install the project.
Install and configure a database server. At the moment shadowd officially supports PostgreSQL and MySQL. Afterwards create a new user and database for shadowd and import the correct layout.
If you are using PostgreSQL you can use
psqlto import the layout.
If you are using MySQL you can use
psql -Ushadowd shadowd < /usr/share/shadowd/pgsql_layout.sql
mysqlto import the layout. The user requires the
mysql -ushadowd -p shadowd < /usr/share/shadowd/mysql_layout.sql
The installer copies the configuration file to /etc/shadowd/shadowd.ini . The file is annotated and should be self-explanatory.