Real-Time Network Auditing System Based on Low-Cost IoT Devices

Abstract

[Abstract] Nowadays, the commercial activity of all types of companies depends significantly on their networks and the security of their IT systems. Despite this, there are studies that show deficiencies in cybersecurity, particularly in small and medium-sized enterprises (SMEs). This is due to the fact that only generic, costly and difficult to interpret security solutions are available in the current literature. As we can see, it is necessary to create a security audit system, aimed at SMEs and, therefore, low cost, easy to use and interpret and that can be adapted to networks of different types and sizes. For this reason, we have created a network audit system based on low-cost hardware boards. This consists of a series of sensors that analyze the networks and a central server that allows us to give persistence to the information through a data streaming system and, in addition, create a web application in which to view the information of all the audited companies. As a result, we have obtained a tool capable of creating an inventory of all the organisation’s network assets, through active and passive analysis; capable of listing the vulnerabilities of the assets, indicating their level of severity and, in addition, capable of performing WiFi analysis. On the other hand, we want to highlight some important non-functional features to meet the main objective: it is a low-cost, scalable and modular solution that adapts to any format and size of network and, in addition, it is easy to use and understand, aimed to non-expert personnel.