HoneyNet Workshop, Warsaw May 13, 2014
Secur i ty. Analyt ics . Ins ight .2
Data Analysis and Visualization LInuX
Secur i ty. Analyt ics . Ins ight .3
• Live Linux CD based on Ubuntu 13.10 Desktop
• Collection of free tools for data processing & visualization
• Tools work out of the box
• No compilation or installation required
• Comes with documentation
• Quick start description for the most important tools
• Links to manuals and tutorials
What is DAVIX?
Secur i ty. Analyt ics . Ins ight .4
User-Interface and Menus
Capture
Process
Visualize
Services
Secur i ty. Analyt ics . Ins ight .5
Selection of Tools
Process VisualizeCapture
• AfterGlow • R • RStudio • Scapy • Wireshark
• Argus • BroIDS • Snort • LogStash • nfdump • p0f • nmap • PADS
• Cytoscape • Gephi • GGobi • GnuPlot • GraphViz • Maltego • PicViz • Tulip • Treemap• rsyslog
• syslog-ng
Services
Secur i ty. Analyt ics . Ins ight .6
New Tools in DAVIX 2014
• FlowTag
• Google Earth
• LogStash 1.4
• Maltego
• PRADS
• R Studio
• Tele Traffic Tapper
• dns-browse
• netsed
• nsm-console
• rsyslog
• tcpstat
Studio
Secur i ty. Analyt ics . Ins ight .7
git://secviz/davix/
• Install script for all the tools
• apt-installs
• Manual installs
• R and R packages, RStudio
• UI setup
• Hardening of image
• Tool configurations - making tools log into logstash, for example [ to come ]
git://secviz/davix/wiki
• Documentation and user guides
GIT repo - Fork - Contribute!
Secur i ty. Analyt ics . Ins ight .8
To come:
• VM image
• ISO image
How To Use It
Download: https://github.com/secviz/davix/tree/master/install/davix-install-all.sh
!
Then run: !
bash ./davix-install-all.sh calls
• davix-install-*.sh • davix-config.sh
Secur i ty. Analyt ics . Ins ight .9
List of tools with links to online tool
wiki pages
!
Install guide to install on your ownUbuntu Desktop
PDF User Manual
Secur i ty. Analyt ics . Ins ight .10
https://github.com/secviz/davix/wiki/!
!
• Information on all the tools
• Open to your contributions
Wiki User Manual
Secur i ty. Analyt ics . Ins ight .11
DEMO
Afterglow
GephiMondrian
Secur i ty. Analyt ics . Ins ight .12
More information …
!!
http://davix.secviz.org
• New version will be announced and published here! • ISO and VM download locations
Recommended
