Watch out for Suricata

Subnet Dashboard
Graphs Page
IDS Page

Inspiration

We wanted to have a challenge by integrating many applications due to the need of work more efficiently, have all data in one place and finding malacious traffic in our office network.

What it does

In just a few words: A lot.

Intrusion Detection System - finding and preventing threat attacks in our network
Management of virtual Zitec Assets - IP's, Servers, Virtual Machines, Operating Systems, Network devices
Presenting graphs for network traffic

How we built it

At first we documented about IDS / IPS systems and tested the most popular ones, then after we decided which one to use, we started installing packages, configured various settings to capture the dataflows of the network and made a web interface for displaying data to users, so they would be aware of the attcks / trojans / vulnerabilities regarding their computers on the network.

Challenges we ran into

We needed to select the best IDS system, based on performance, configuration options, features and many other factors.

Accomplishments that we're proud of

Integrating 5 different software into single point of presentation.

What we learned

We learned to integrate open-source solutions, a little ruby, some packet capturing in the network, and the most important, we found what traffic we have in our network.

What's next for this project

We want to integrate even more, because this will lead to cost reducing and lower wasted time with searching for assets in different documents or applications.