PIGA, for Policy Based Intrusion Detection System, is the implementation of our intrusion detection model.

This IDS generates an interaction graph corresponding to the local policy. This graph is analyzed in order to compute the set of forbidden sequence of interaction by applying a set of detection rules. Next, for each interaction an audit bit is added in the local policy in order to generate traces. Finally, these traces are analyzed and alarms are generated when a forbidden sequence is detected.

PIGA is actually developed in Java and uses SELinux or Grsecurity policy. It allows to detect several security property violations.