HoneyNet Workshop, Warsaw May 13, 2014

Secur i ty. Analyt ics . Ins ight .2

Data Analysis and Visualization LInuX

Secur i ty. Analyt ics . Ins ight .3

• Live Linux CD based on Ubuntu 13.10 Desktop

• Collection of free tools for data processing & visualization

• Tools work out of the box

• No compilation or installation required

• Comes with documentation

• Quick start description for the most important tools

• Links to manuals and tutorials

What is DAVIX?

Secur i ty. Analyt ics . Ins ight .4

User-Interface and Menus

Capture

Process

Visualize

Services

Secur i ty. Analyt ics . Ins ight .5

Selection of Tools

Process VisualizeCapture

• AfterGlow • R • RStudio • Scapy • Wireshark

• Argus • BroIDS • Snort • LogStash • nfdump • p0f • nmap • PADS

• Cytoscape • Gephi • GGobi • GnuPlot • GraphViz • Maltego • PicViz • Tulip • Treemap• rsyslog

• syslog-ng

Services

Secur i ty. Analyt ics . Ins ight .6

New Tools in DAVIX 2014

• FlowTag

• Google Earth

• LogStash 1.4

• Maltego

• PRADS

• R Studio

• Tele Traffic Tapper

• dns-browse

• netsed

• nsm-console

• rsyslog

• tcpstat

Studio

Secur i ty. Analyt ics . Ins ight .7

git://secviz/davix/

• Install script for all the tools

• apt-installs

• Manual installs

• R and R packages, RStudio

• UI setup

• Hardening of image

• Tool configurations - making tools log into logstash, for example [ to come ]

git://secviz/davix/wiki

• Documentation and user guides

GIT repo - Fork - Contribute!

Secur i ty. Analyt ics . Ins ight .8

To come:

• VM image

• ISO image

How To Use It

Download: https://github.com/secviz/davix/tree/master/install/davix-install-all.sh

!

Then run: !

bash ./davix-install-all.sh calls

• davix-install-*.sh • davix-config.sh

Secur i ty. Analyt ics . Ins ight .9

List of tools with links to online tool

wiki pages

!

Install guide to install on your ownUbuntu Desktop

PDF User Manual

Secur i ty. Analyt ics . Ins ight .10

https://github.com/secviz/davix/wiki/!

!

• Information on all the tools

• Open to your contributions

Wiki User Manual

Secur i ty. Analyt ics . Ins ight .11

DEMO

Afterglow

GephiMondrian

Secur i ty. Analyt ics . Ins ight .12

More information …

!!

http://davix.secviz.org

• New version will be announced and published here! • ISO and VM download locations

13

raffael.marty@pixlcloud.com