Odprtokodna rešitev za večanje varnosti domačih omrežij

VIVODA, TIM (author), Sedlar, Urban (mentor)

V diplomskem delu je predstavljena rešitev za večanje kibernetske varnosti v okolju lokalnih oziroma domačih omrežij. Področje kibernetske varnosti je v zadnjem času pridobilo veliko pozornosti, predvsem iz vidika aktualnih družbeno-političnih razmer. Iz tega sledi, da se dandanes implementacija ali uporaba vsake storitve upošteva tudi iz vidika njenega vpliva na stopnjo informacijske varnosti v omrežjih. Poleg tega smo v zadnjih letih priča izraziti digitalizaciji, pri čemer digitalne storitve ter povezane naprave predstavljajo osnovo za delovanje sodobne digitalne družbe, gospodarstva in kritične infrastrukture. Vsem naštetim področjem je skupen človek, ki hkrati predstavlja osnovo za implementacijo ter operativo naprav in storitev, po drugi strani pa je tudi eden glavnih vektorjev napada v omrežjih. V poslovnih okoljih se obenem vpeljuje trend »prinesi svojo napravo« (BYOD), ki uporabnikom omogoča, da potencialno okužene naprave prenašajo med lokalnimi in poslovnimi okolji, iz česar izhaja, da je prav tako nujna poostritev varnostnih zahtev v domačih okoljih, preko katerih se običajno pretakajo najranljivejši osebni podatki. Orodja napadalcev postajajo čedalje bolj napredna, domača omrežja pa se iz vidika varnosti ne razvijajo v tolikšni meri kot poslovna. V diplomskem delu smo definirali področje kibernetske varnosti in raziskali komercialne ter odprtokodne rešitve, namenjene zaščiti domačih omrežij. V nadaljevanju smo oblikovali celovito rešitev, ki bo na podlagi izbrane strojne opreme Raspberry Pi 4 Model B 8GB omogočala večjo zaščito domačega omrežja. Implementirali smo rešitev, sestavljeno iz programske opreme, ki omogoča IDS (Suricata), DNS (Pi-hole) in VPN (WireGuard) varnostne funkcionalnosti. Rešitev tako omogoča pasivno zaščito pred incidenti, zaščito pred DNS napadi ter oglasi, obenem pa uporabniku ponuja vse to tudi na daljavo. Rešitev je po uspešni implementaciji in testiranju primerna za uporabo v vseh domačih omrežjih, saj ne vpliva na tehnične značilnosti omrežja, obenem pa zaradi odprtokodne narave uporabljene programske opreme ponuja zanesljivo in brezplačno alternativo komercialnim produktom.

• Language: Slovenian
• Keywords: kibernetska varnost, odprtokodna programska oprema, Raspberry Pi, Suricata, Pi-hole, WireGuard
• Work type: Undergraduate thesis
• Organization: FE - Faculty of Electrical Engineering
• Year: 2023
• PID: 20.500.12556/RUL-147498
• COBISS.SI-ID: 158382083
• Publication date in RUL: 06.07.2023

Secondary language

• Language: English
• Title: An open source appliance to enhance home network security

Abstract

This thesis presents a solution for increasing cyber security of local or home networks. The field of cyber security has recently gained a lot of attention, especially in the light of the current socio-political situation. It follows that nowadays the implementation or use of any service is also considered from the point of view of its impact on the level of information security in networks. In addition, recent years have also seen a marked digitalisation, with digital services and connected devices forming the basis for the operation of modern digital society, the economy and critical infrastructure. Common to all these areas is the human being, which is both the basis for the implementation and operation of devices and services and, on the other hand, one of the main vectors of attack in networks. At the same time, the BYOD trend is being introduced in business environments, allowing users to transfer potentially infected devices between local and business environments, which implies that it is also necessary to tighten security requirements in home environments, through which the most vulnerable personal data is usually transferred. Attackers' tools are becoming more sophisticated and home networks are not evolving as much as business networks in terms of security. In this thesis, we define the field of cyber security and explore commercial and open-source solutions to protect home networks. In addition, we design a solution that will enable greater protection of the home network based on the chosen hardware, Raspberry Pi 4 Model B 8GB. We have implemented a solution consisting of software that provides IDS (Suricata), DNS (Pi-hole) and VPN (WireGuard) security functionalities. The solution thus provides passive protection against incidents, protection against DNS attacks and advertisements, while also offering all this to the user remotely. After successful implementation and testing, the solution is suitable for use in all home networks, as it does not affect the technical characteristics of the network, while at the same time, due to the open-source nature of the software used, it offers a reliable and free alternative to commercial products.

• Keywords: cyber security, open-source software, Raspberry Pi, Suricata, Pi-hole, WireGuard