Design an Intrusion Detection System, Multiple Honeypot and Packet Analyzer Using Raspberry Pi 4 for Home Network

Febrian Rachmad Hariawan, Septia Ulfa Sunaringtyas
{"title":"Design an Intrusion Detection System, Multiple Honeypot and Packet Analyzer Using Raspberry Pi 4 for Home Network","authors":"Febrian Rachmad Hariawan, Septia Ulfa Sunaringtyas","doi":"10.1109/QIR54354.2021.9716189","DOIUrl":null,"url":null,"abstract":"Increased crime and cyber-attacks make network security an essential prerequisite for organizations. However, organizations cannot guarantee this because the COVID-19 pandemic has forced organizations to suspend activities in the office and give employees the option to work from home. As a result, employees must always be connected to the home network to work. It can attract hackers to take advantage of the situation by launching various attacks. Therefore home network security must be updated, minimize vulnerabilities, and apply additional security. The number of IoT devices that can connect to the home network is also considered to increase security because the main entry point for hacking IoT is through the network. Raspberry Pi 4 can be used as a low-cost, power-efficient, and practical solution for home network security, including IDS Suricata, multiple honeypots (Cowrie & Dionaea), and Tshark packet analyzer. There are six types of attack simulations: port scanning, brute force, TCP flood attacks, smurf attacks, UDP flood attacks, and exploits on services/ports. Measurement of device performance is also carried out when running the system. Log data from the four sensors will be visualized with the ELK stack, making it easier to analyze attacks.","PeriodicalId":446396,"journal":{"name":"2021 17th International Conference on Quality in Research (QIR): International Symposium on Electrical and Computer Engineering","volume":"1 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2021-10-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"2021 17th International Conference on Quality in Research (QIR): International Symposium on Electrical and Computer Engineering","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/QIR54354.2021.9716189","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 0

Abstract

Increased crime and cyber-attacks make network security an essential prerequisite for organizations. However, organizations cannot guarantee this because the COVID-19 pandemic has forced organizations to suspend activities in the office and give employees the option to work from home. As a result, employees must always be connected to the home network to work. It can attract hackers to take advantage of the situation by launching various attacks. Therefore home network security must be updated, minimize vulnerabilities, and apply additional security. The number of IoT devices that can connect to the home network is also considered to increase security because the main entry point for hacking IoT is through the network. Raspberry Pi 4 can be used as a low-cost, power-efficient, and practical solution for home network security, including IDS Suricata, multiple honeypots (Cowrie & Dionaea), and Tshark packet analyzer. There are six types of attack simulations: port scanning, brute force, TCP flood attacks, smurf attacks, UDP flood attacks, and exploits on services/ports. Measurement of device performance is also carried out when running the system. Log data from the four sensors will be visualized with the ELK stack, making it easier to analyze attacks.
基于树莓派4的家庭网络入侵检测系统、多蜜罐和包分析器的设计
犯罪和网络攻击的增加使网络安全成为组织的基本先决条件。然而,组织无法保证这一点,因为COVID-19大流行迫使组织暂停在办公室的活动,并让员工选择在家工作。因此,员工必须始终连接到家庭网络才能工作。它可以吸引黑客利用这种情况发动各种攻击。因此,必须更新家庭网络安全,尽量减少漏洞,并应用额外的安全措施。可以连接到家庭网络的物联网设备的数量也被认为可以提高安全性,因为黑客入侵物联网的主要入口是通过网络。树莓派4可以用作家庭网络安全的低成本,节能和实用的解决方案,包括IDS Suricata,多个蜜罐(Cowrie & Dionaea)和Tshark数据包分析器。有六种类型的攻击模拟:端口扫描、暴力破解、TCP洪水攻击、smurf攻击、UDP洪水攻击和对服务/端口的利用。在系统运行时,还进行了设备性能的测量。来自四个传感器的日志数据将与ELK堆栈一起可视化,使其更容易分析攻击。
本文章由计算机程序翻译,如有差异,请以英文原文为准。
求助全文
约1分钟内获得全文 求助全文
来源期刊
自引率
0.00%
发文量
0
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
确定
请完成安全验证×
copy
已复制链接
快去分享给好友吧!
我知道了
右上角分享
点击右上角分享
0
联系我们:info@booksci.cn Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。 Copyright © 2023 布克学术 All rights reserved.
京ICP备2023020795号-1
ghs 京公网安备 11010802042870号
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术官方微信