Home netsec Dashboard

number of detection triggered per module

number of detection triggered per device

Devices connected in home network

Name of device	privacy sensitivity	security sensitivity	Recent severest alert	Block this device
AC	low	medium	id: 9343, date: 12/22 18:32, severity: 40
Camera	high	low	id: 9443, date: 12/22 14:32, severity: 60
TV	low	low	id: 9443, date: 12/22 19:32, severity: 30

Typical stages of hacking

1. Reconnaissance

   Network activity shows a device scanning your home network and gathering informaiton about other devices on your network. May be indicative of an attacker looking for other devices to exploit.

2. Penetration

   At this stage, the hacker aims to gain your credentials and access to your devices. They typically do so by including but not limited to sending phishing links and emails and brute force guessing password of your devices, sending fake webpages, poisoning your DNS servers.

3. Sabotage and Exfiltration

   Now the hacker can do whatever it wants. It can install malware on your device and make it part of his botnet. It can eavesdrop and steal your private information. It can prevent your device from functioning correctly...

What does each individual Module do?

---

Module pertains to Reconnaissance

1. port scan detector

   detects Horizontal and Vertical port scans.

2. ARPScanDetector

   module to check for ARP scans in ARP traffic.

Module pertains to Penetration

1. threat intelligence

   checks if each IP is in a list of malicious IPs.

2. VirusTotal

   lookup IP address on VirusTotal.

Module pertains to Sabotage and Exfiltration

1. rnn-cc-detection

   detects command and control channels using recurrent neural network and the stratosphere behavioral letters.

2. flowalerts

   find malicious behaviour in each flow. Current measures are: long duration of the connection, successful ssh.

3. flowmldetection

   detect malicious flows using machine learning.

FAQ

1. Why IOT devices are vulnerable to cyber-attack?

   There are many reasons. But the most critical one is IOT devices' intrinsic limited hardware resource and computational power. Therefore, when design IoT devices, there are constraint with many aspects such as communication protocols, encryption algorithm which are integral to security.

2. Why should I care about IoT security in my house?

   Privacy. You definitely don't want your camera be accessible to anyone except you right?

   Security. What if your door can be controlled by mobile devices such as your phone?

3. What else besides privacy and security?

   Social responsibility. You compromised devices could weaponize cyber-criminal. We all enjoy the surfing internet. Accordingly, we should take the responsibility at least for our own devices by not allowing them to disturb public internet services.

4. What are some best practices for cyber-security?

   Always use your own password instead of the default one.

   Don't let your device connect to internet if it does not need to function.

   Isolate your devices in a separate local area network.

Fourth