Personal Home Network Intrusion Checking Tool

Abstract

Home networks have a potential risk of intrusion or disturbances, and packet analysers could be too complex for normal home users to use. This project hopes to produce a tool that allows home users to determine if there are suspicious hosts in their network through packet analysis. Normal and attack packet captures of the home network is captured with Wireshark and run through the packet analysis tool for comparison of the produced result data. The analysis of the packets showed that there are big differences between packet captures that are normal and ones that have attacks, such as the number of flow counts, the number of occurrences of source IP address, port by bytes data and more. After the comparison of result data, the author is able to conclude that the tool allows home network users to determine suspicious hosts and activity in their home network, and improvements such as a graphical user interface and function to run in real-time was planned and discussed for future development.