SweetSecurity: Network Security Monitoring on Raspberry Pi type devices
SweetSecurity
Scripts to setup and install Bro IDS, Elasticsearch, Logstash, Kibana, and Critical Stack on any device.
For more information on installation and how Sweet Security works, see the Wiki:
https://github.com/TravisFSmith/SweetSecurity/wiki
Installation:
- git clone https://github.com/TravisFSmith/SweetSecurity.git && cd SweetSecurity
- sudo python setup.py
- Follow prompts to enter appropriate information for chosen installation type
New Functionality:
- Modularized Installation – Choose to deploy all the tools on one device, or split among multiple for better performance.
- Full Install – Deploy Bro IDS, Critical Stack, Elasticsearch, Logstash, Kibana, Apache, and Sweet Security
- Sensor Install – Deploy Bro IDS, Critical Stack, Logstash, and Sweet Security
- Web Admin Install – Deploy Elasticsearch, Kibana, and Apache
- ARP Spoofing – Full code to monitor all network traffic out of the box without network changes.
- Complete Bro Log Support – All Bro log files are now normalized by Logstash
- Kibana Content – Searches, Visualizations, and Dashboards are now included
- Architecture Support – Now supports installing on non ARM architectures
- Custom NMAP Pre-Fix – updated NMAP pre-fixes based on the IEEE OUI list
- Web Administration – apache/flask based web administration to manage known devices and system health
