Intrusion Alert

Arduino Intrusion Detection / Honeypot

I decided to make a small intrusion detection system for my network. It works like this:

  • When powered up it displays it’s address (can be obtained via DHCP or set statically in the code)
  • After 20 seconds it blanks the display and listens for incomming traffic to the device.
  • If it receives an ICMP, a UDP or a TCP SYN packet it shows up on the display.

When I get some buzzers in a few weeks, I will add that as an audible alarm.

Nothing in my network should be scanning or connecting to this IP. If this display shows something, it means I have intruders poking around in my network.

 

Components used

The veroboard layout:

Software

All the program can be found at github here.

Leave a Reply

Your email address will not be published. Required fields are marked *