Project Initialized During HackTheNorth

• Designed for Linux OS
• curl or wget is required for quick install
• git should be installed

Detailed dependency list can be found in DEPENDENCIES.md

via curl

$ sudo sh -c "$(curl -fsSL https://raw.githubusercontent.com/K4YT3X/DefenseMatrix/master/quickinstall.sh)"

via wget

$ sudo sh -c "$(wget https://raw.githubusercontent.com/K4YT3X/DefenseMatrix/master/quickinstall.sh -O -)"

• Tested on Kali VM
• Some minor improvements needed
  • (Maybe) get rid of config file since it's now useless
  • Scheduled security audit?
• Added Dependency list

• Added detailed file information for every file
• Added Shebangs for every executable

• Deciding to continue this project and add SCUTUM
• Other decisions about this project is being made

During HTN we made a test. Our nameless linux server which is exposed to the internet received roughly 6000 attacks and port scanning attempts every 24 hours.

DefenseMatrix helps individuals and organizations who use Linux to secure their servers on various dimentions automatically. It makes securing a Linux server faster and easier.

Never before have a program been able to have so many security features packed in one. Therefore we provide you with this all-in-one solution that will make the following difficult things easier to handle.

• TCP/UDP/ICMP firewall
• ARP firewall
• Rootkit Detection
• Password complexity check
• Attack analysis and visualization

These basic security features will defend your server(s) against most tech based attacks.
We configure these things automatically for you.

We still make it easy for you

$ sudo DefenseMatrix --uninstall

ALL commands require root privilege

Firewall is controlled by SCUTUM Firewall.
For more details visit SCUTUM Help Page

$ sudo openport [port1] [port2] [port3]      # Open tcp ports
$ sudo closeport [port1] [port2] [port3]     # Close tcp ports
$ sudo service scutum start     # Start scutum service
$ sudo service scutum stop      # Stop scutum service
$ sudo systemctl enable scutum  # Start SCUTUM with system
$ sudo systemctl disable scutum # Don't start SCUTUM with system
$ sudo scutum                   # Start SCUTUM Normally
$ sudo scutum --start           # Start SCUTUM Manually for once even it it's disabled
$ sudo scutum --enable          # Enable SCUTUM (Start automatically on connect)
$ sudo scutum --disable         # Disable SCUTUM (Don't start automatically on connect)
$ sudo scutum --reset           # Reset SCUTUM (Allow ALL ARP packages temporarily)
$ sudo scutum --purgelog        # Purge SCUTUM logs
$ sudo scutum --install         # Run scutum installation wizard and install SCUTUM into system
$ sudo scutum --uninstall       # Remove SCUTUM from system completely 
$ sudo scutum --upgrade         # Upgrade SCUTUM and AVALON Framework

$ sudo DefenseMatrix --audit    # Run rootkit check and generate report

Integrated into passwd command.
After installation, passwd command will check new password complexity automatically.

$ passwd

TODO
To restore the original passwd binary file:

$ sudo passwd --restore

If you still feel unsafe after installing this security suite, we recommend you to look into IDSs and WAFs. Snort will be a good one to begin with.