IT-S in a Box: Extension - Revision history

NKirnbauer: NKirnbauer moved page ITS in a Box to IT-S in a Box: Extension

2024-10-22T14:22:26Z

NKirnbauer moved page ITS in a Box to IT-S in a Box: Extension

← Older revision	Revision as of 14:22, 22 October 2024
(No difference)

PDallanmis: Extension of the description and use of the security box in the context of the Master's thesis "Smart Home Security Boxes – a practice-oriented evaluation" Wahlfachprojekt 1

2024-06-21T21:59:27Z

Extension of the description and use of the security box in the context of the Master's thesis "Smart Home Security Boxes – a practice-oriented evaluation" Wahlfachprojekt 1

← Older revision		Revision as of 21:59, 21 June 2024
Line 153:		Line 153:
	$ nano /opt/librenms/config.php		$ nano /opt/librenms/config.php
	</pre>		</pre>
	* Manual		* Manual Download of Nginx Service: The Nginx service needs to be downloaded manually.

	Download of Nginx Service: The Nginx service needs to be downloaded manually.
	<pre>		<pre>
	$ sudo apt install nginx		$ sudo apt install nginx

PDallanmis: Extension of the description and use of the security box in the context of the Master's thesis "Smart Home Security Boxes – a practice-oriented evaluation" Wahlfachprojekt 1

2024-06-21T21:48:38Z

Extension of the description and use of the security box in the context of the Master's thesis "Smart Home Security Boxes – a practice-oriented evaluation" Wahlfachprojekt 1

← Older revision		Revision as of 21:48, 21 June 2024
Line 1:		Line 1:
			== Summary ==
			Extension of the description and use of the security box in the context of the Master's thesis "Smart Home Security Boxes – a practice-oriented evaluation" Wahlfachprojekt 1

	== WFP1 - Extension ==		== WFP1 - Extension ==

	~~Extension of the description and use of the security box in the context of the Master's thesis "Smart Home Security Boxes – a practice-oriented evaluation"~~
	~~Wahlfachprojekt 1~~

	=== Requirements ===		=== Requirements ===

PDallanmis at 21:47, 21 June 2024

2024-06-21T21:47:30Z

PDallanmis at 21:45, 21 June 2024

2024-06-21T21:45:12Z

← Older revision		Revision as of 21:45, 21 June 2024
Line 3:		Line 3:
	Extension of the description and use of the security box in the context of the Master's thesis "Smart Home Security Boxes – a practice-oriented evaluation"		Extension of the description and use of the security box in the context of the Master's thesis "Smart Home Security Boxes – a practice-oriented evaluation"
	Wahlfachprojekt 1		Wahlfachprojekt 1

	* University of Applied Sciences: FH Campus Wien
	* Course: IT Security 2024
	* Thesis: Wahlfachprojekt 1
	* Authors: Pierre Dallanmis, Nico Schmalzl
	* Topic: Smart Home Security Boxes – a practice-oriented evaluation
	* First supervisor: Ines Kramer, MSc BSc

	=== Requirements ===		=== Requirements ===

PDallanmis: Extension of the description and use of the security box in the context of the Master's thesis "Smart Home Security Boxes – a practice-oriented evaluation" Wahlfachprojekt 1

2024-06-21T21:43:49Z

Extension of the description and use of the security box in the context of the Master's thesis "Smart Home Security Boxes – a practice-oriented evaluation" Wahlfachprojekt 1

Show changes

PDallanmis: Created page with "== Summary == Description what this documentation is about. Test == Requirements == * Operating system: Ubuntu 18.04 bionic amd64 * Packages: git emacs In order to complete these steps, you must have followed Some Other Documentation before. == Description == === Step 1 === Enter these commands in the shell echo foo echo bar === Step 2 === Make sure to read * War and Peace * Lord of the Rings * The Baroque Cycle == Used Hardware == Device to be used..."

2024-06-20T14:57:40Z

Created page with "== Summary == Description what this documentation is about. Test == Requirements == * Operating system: Ubuntu 18.04 bionic amd64 * Packages: git emacs In order to complete these steps, you must have followed Some Other Documentation before. == Description == === Step 1 === Enter these commands in the shell echo foo echo bar === Step 2 === Make sure to read * War and Peace * Lord of the Rings * The Baroque Cycle == Used Hardware == Device to be used..."

New page

== Summary ==

Description what this documentation is about.
Test

== Requirements ==

* Operating system: Ubuntu 18.04 bionic amd64
* Packages: git emacs

In order to complete these steps, you must have followed [[Some Other Documentation]] before.

== Description ==

=== Step 1 ===

Enter these commands in the shell

echo foo
echo bar

=== Step 2 ===

Make sure to read

* War and Peace
* Lord of the Rings
* The Baroque Cycle

== Used Hardware ==

[[Device to be used with this documentation]]
[[Maybe another device to be used with this documentation]]

== Courses ==

* [[A course where this documentation was used]] (2017, 2018)
* [[Another one]] (2018)

== References ==

* https://wikipedia.org
* https://google.com

[[Category:Documentation]]

← Older revision		Revision as of 21:47, 21 June 2024
Line 18:		Line 18:
	Note: Ubuntu 20.04 cannot be installed via Raspberry Pi Imager for Raspberry Pi 4 and must be manually installed and configured instead!		Note: Ubuntu 20.04 cannot be installed via Raspberry Pi Imager for Raspberry Pi 4 and must be manually installed and configured instead!

	=== Overview ===		== Overview ==

	==== Description ====		=== Description ===

	This elective subject project focuses on the extension and optimization of the existing master's thesis. The installation process does not differ from said master's thesis and can still be applied for both the Raspberry Pi 4 (Ubuntu 20.04) and the Raspberry Pi 5 (Ubuntu 24.04). For installation on Raspberry Pi 5 (Ubuntu 24.04), we provide assistance in the form of a script.		This elective subject project focuses on the extension and optimization of the existing master's thesis. The installation process does not differ from said master's thesis and can still be applied for both the Raspberry Pi 4 (Ubuntu 20.04) and the Raspberry Pi 5 (Ubuntu 24.04). For installation on Raspberry Pi 5 (Ubuntu 24.04), we provide assistance in the form of a script.

	==== Update of Existing Project ====		=== Update of Existing Project ===

	To ensure that our systems operate optimally and securely, we recently performed comprehensive updates to bring all dependencies and installations up to date. This included updates to key platforms such as PHP and Python, as well as databases like MySQL. Additionally, we also updated our network monitoring and security applications such as LibreNMS, Suricata, and EVEBOX. Furthermore, we made improvements to proxy services like Squid and content filters like SquidGuard. These measures ensure that we have integrated current security patches and can benefit from the latest features and performance enhancements.		To ensure that our systems operate optimally and securely, we recently performed comprehensive updates to bring all dependencies and installations up to date. This included updates to key platforms such as PHP and Python, as well as databases like MySQL. Additionally, we also updated our network monitoring and security applications such as LibreNMS, Suricata, and EVEBOX. Furthermore, we made improvements to proxy services like Squid and content filters like SquidGuard. These measures ensure that we have integrated current security patches and can benefit from the latest features and performance enhancements.

	==== List of Updated Software (June 16, 2024) ====		=== List of Updated Software (June 16, 2024) ===

	* EveBox: 0.18.2		* EveBox: 0.18.2
Line 38:		Line 38:
	* Ubuntu: 24.04		* Ubuntu: 24.04

	==== Alternative Software Considered to Suricata ====		=== Alternative Software Considered to Suricata ===

	After thorough evaluation, in addition to Suricata, we also installed and tested Snort to find the best network security solution for our needs. Despite testing, we did not find significant differences in functionality or performance that would justify switching from Suricata to Snort. Therefore, we decided to continue using Suricata, as it meets our requirements optimally and is already integrated into our existing infrastructure.		After thorough evaluation, in addition to Suricata, we also installed and tested Snort to find the best network security solution for our needs. Despite testing, we did not find significant differences in functionality or performance that would justify switching from Suricata to Snort. Therefore, we decided to continue using Suricata, as it meets our requirements optimally and is already integrated into our existing infrastructure.

	===== Advantages of Suricata: =====		==== Advantages of Suricata: ====

	* Multi-threaded Architecture: Suricata efficiently utilizes modern multi-core processors due to its multi-threaded architecture. This provides superior performance in terms of throughput and scalability compared to Snort. This architecture enables Suricata to efficiently handle high-speed networks and large volumes of data.		* Multi-threaded Architecture: Suricata efficiently utilizes modern multi-core processors due to its multi-threaded architecture. This provides superior performance in terms of throughput and scalability compared to Snort. This architecture enables Suricata to efficiently handle high-speed networks and large volumes of data.
Line 50:		Line 50:
	* Active Development and Community: Suricata benefits from an active developer community and regular updates, ensuring it stays abreast of the latest security threats and technological advancements. This collaborative approach leads to continuous improvements and bug fixes.		* Active Development and Community: Suricata benefits from an active developer community and regular updates, ensuring it stays abreast of the latest security threats and technological advancements. This collaborative approach leads to continuous improvements and bug fixes.

	===== Disadvantages of Snort Compared: =====		==== Disadvantages of Snort Compared: ====

	* Single-Threaded Nature: Snort traditionally operates in a single-threaded model, which may limit its ability to fully leverage modern multi-core hardware. This can impact its performance in high-speed networks compared to Suricata.		* Single-Threaded Nature: Snort traditionally operates in a single-threaded model, which may limit its ability to fully leverage modern multi-core hardware. This can impact its performance in high-speed networks compared to Suricata.
	* Protocol Handling: While effective for many common protocols, Snort may not have the same level of built-in support for new or less common protocols as Suricata. This could limit its effectiveness in certain network environments.		* Protocol Handling: While effective for many common protocols, Snort may not have the same level of built-in support for new or less common protocols as Suricata. This could limit its effectiveness in certain network environments.

	==== Other Alternatives Considered ====		=== Other Alternatives Considered ===

	* Security Onion: Security Onion is a Linux distribution that integrates a range of open-source security monitoring tools, including Suricata, Snort, Zeek, and others. It provides a comprehensive platform for network monitoring, log management, and forensic analysis.		* Security Onion: Security Onion is a Linux distribution that integrates a range of open-source security monitoring tools, including Suricata, Snort, Zeek, and others. It provides a comprehensive platform for network monitoring, log management, and forensic analysis.
Line 62:		Line 62:
	We also considered the possibility of adding additional open-source software to expand our capabilities. However, we encountered limitations regarding available storage on the Raspberry Pi with 16 GB of memory. This led us to limit our selection to priority applications to ensure the stability and performance of our system.		We also considered the possibility of adding additional open-source software to expand our capabilities. However, we encountered limitations regarding available storage on the Raspberry Pi with 16 GB of memory. This led us to limit our selection to priority applications to ensure the stability and performance of our system.

	=== Performance Comparison Raspberry Pi 4/5 ===		== Performance Comparison Raspberry Pi 4/5 ==

	The use of the Raspberry Pi 5 was significantly easier and more enjoyable, as it did not overheat, was more powerful, and allowed for smoother operation. In contrast, the Raspberry Pi 4 tended to have visual errors and even crashes, complicating work with it. The improved hardware of the Raspberry Pi 5 provided more stable and reliable performance, significantly easing development and use.		The use of the Raspberry Pi 5 was significantly easier and more enjoyable, as it did not overheat, was more powerful, and allowed for smoother operation. In contrast, the Raspberry Pi 4 tended to have visual errors and even crashes, complicating work with it. The improved hardware of the Raspberry Pi 5 provided more stable and reliable performance, significantly easing development and use.
Line 115:		Line 115:
	Adjust the monitoring frequency by changing the sleep duration in the script (sleep 60).		Adjust the monitoring frequency by changing the sleep duration in the script (sleep 60).

	=== Automation Script ===		== Automation Script ==

	We have implemented an automation process to efficiently handle recurring tasks. This includes installing necessary software components and configuring specific system settings. This automation helps save time and minimize errors in manual configuration steps.		We have implemented an automation process to efficiently handle recurring tasks. This includes installing necessary software components and configuring specific system settings. This automation helps save time and minimize errors in manual configuration steps.
Line 134:		Line 134:
	</pre>		</pre>

	=== Manual Adjustments ===		== Manual Adjustments ==

	When configuring the Raspberry Pi, IP addresses need to be manually adjusted in certain files to match the Raspberry Pi's address. Here are the relevant directories and files:		When configuring the Raspberry Pi, IP addresses need to be manually adjusted in certain files to match the Raspberry Pi's address. Here are the relevant directories and files: