Network security and monitoring : NIDS deployment on single-board computers, expectations and limitations

Details

Supervisors

Sadre, Ramin

Faculty

Ecole polytechnique de Louvain

Degree label

Master [120] en sciences informatiques

Abstract

Over the years, the Internet is continuously expanding and it has been able to find its place as one of the unavoidable medium. Nowadays, everyone is able to express, learn or entertain itself. It's amazing to see how the Internet has changed our habits. Users produce a lot of personal data, each day, each year. Therefore, data and user information became the prey of several adversaries. It is therefore legitimate to seek to protect himself especially when firewalls are not always sufficient. One might wonder if there are existing solutions to protect the network from external attacks? Is it possible to run such programs on low cost devices? Indeed, the emergence of the Internet of Things changes everything: new devices reach the market at very competitive prices. The thesis gives some studies and discussions about the deployment of Network Intrusion Detection Systems on single-board computers, like the Raspberry Pi, to protect ourself from adversaries. The thesis presents two key points: let's look to the capacity measurement of commodity hardware like the single-board computers. Then, the thesis discusses the deployment of NIDSes on single-board computers and analyses the reliability of results with special attention to the limitations of such devices.