STM Journals Peer-reviewed research from Consortium e-Learning Network

Journal of Advances in Shell Programming Original Research

A Shell Programming Framework for Automated Risk Assessment and Security Control in Linux Operating Systems

  1. R. Somadder Mangalmay Institute of Management and Technology

Abstract

Linux operating systems are widely used in servers, embedded platforms, cloud infrastructure, and high-performance computing environments, making continuous system monitoring and risk assessment essential for maintaining security and operational reliability. Conventional risk assessment approaches often rely on individual system commands and manual interpretation of processor, memory, process, file, and security information, which can limit timely identification of abnormal system conditions. This paper proposes a Bash shell programming-based automated risk assessment framework for Linux operating systems integrated with an isomorphic graph model for risk mitigation. The proposed framework automatically collects and analyzes system-level parameters including processor utilization, memory consumption, running processes, file permissions, user activity, network services, and system logs. The collected parameters are mapped to Low, Medium, and High (L/M/H) risk levels and subsequently associated with Preventive, Detective, and Corrective (PC/DC/CC) security controls. The isomorphic representation establishes relationships among system resources, risk levels, and security control mechanisms, providing a structured approach to automated risk identification and mitigation. The framework is implemented using Bash shell scripts and evaluated under controlled Linux system conditions to examine its monitoring capability, risk classification, and computational overhead. The proposed approach provides a lightweight and transparent mechanism for automating Linux security assessment while retaining the mathematical structure of the isomorphic risk model.

Keywords

References (25)

  1. Patra PK, Pradhan PL. Proposed isomorphic graph model for risk assessment on a Unix operating system. Int J Risk Conting Manag. 2013;2(3):49-62. doi:10.4018/ijrcm.2013070104.
  2. Ramey C, Fox B. Bash reference manual [Online]. Version 5.3. Free Software Foundation; 2025.
  3. Kerrisk M. ps(1)—report a snapshot of the current processes [Online]. Linux man-pages project. Available from: https://man7.org/linux/man-pages/man1/ps.1.html.
  4. Kerrisk M. free(1)—display amount of free and used memory in the system [Online]. Linux man-pages project. Available from: https://man7.org/linux/man-pages/man1/free.1.html.
  5. Kerrisk M. vmstat(8)—report virtual memory statistics [Online]. Linux man-pages project. Available from: https://man7.org/linux/man-pages/man8/vmstat.8.html.
  6. Kerrisk M. ss(8)—another utility to investigate sockets [Online]. Linux man-pages project. Available from: https://man7.org/linux/man-pages/man8/ss.8.html.
  7. Kerrisk M. find(1)—search for files in a directory hierarchy [Online]. Linux man-pages project. Available from: https://man7.org/linux/man-pages/man1/find.1.html.
  8. Kent K, Souppaya M. Guide to computer security log management: Recommendations of the National Institute of Standards and Technology. Gaithersburg (MD): National Institute of Standards and Technology; 2006. NIST Special Publication 800-92. doi:10.6028/NIST.SP.800-92.
  9. Dempsey KL, Johnson LA, Scholl MA, Stine KM, Jones AC, Orebaugh A, et al. Information security continuous monitoring (ISCM) for federal information systems and organizations. Gaithersburg (MD): National Institute of Standards and Technology; 2011. NIST SP 800-137.
  10. Ross R, Pillitteri V. Security and privacy controls for information systems and organizations. Gaithersburg (MD): National Institute of Standards and Technology; 2020. NIST SP 800-53 Rev. 5. doi:10.6028/NIST.SP.800-53r5.
  11. Radack S. Continuous monitoring of information security: an essential component of risk management. Gaithersburg (MD): National Institute of Standards and Technology; 2011.
  12. Karamitas C, Kehagias A. REcover: towards recovering object files from stripped binary executables. J Comput Virol Hacking Tech. 2025;21:29. doi:10.1007/s11416-025-00565-1.
  13. Linux Foundation. iproute2/ss documentation: Linux networking tools documentation [Online]. Linux Foundation. Available from: https://www.kernel.org/pub/linux/utils/net/iproute2/.
  14. Brazil B. Prometheus: Up & Running: Infrastructure and Application Performance Monitoring. Sebastopol, CA: O'Reilly Media, Inc.; 2018.
  15. Hiramatsu Y, Ito M, Koyano K, Hanyu H, Usuki T. Energy saving project for datacenters. Hitachi Rev. 2008;57(5):226-230.
  16. Bace RG, Mell P. Intrusion detection systems. Gaithersburg (MD): National Institute of Standards and Technology; 2001.
  17. Scarfone K, Mell P. Guide to intrusion detection and prevention systems (IDPS). Gaithersburg (MD): National Institute of Standards and Technology; 2007. NIST SP 800-94.
  18. Mell PM, Lippmann R, Hu CT, Haines J, Zissman M. An overview of issues in testing intrusion detection systems. Gaithersburg (MD): National Institute of Standards and Technology; 2003. NISTIR 7007. doi:10.6028/NIST.IR.7007.
  19. Oliner A, Ganapathi A, Xu W. Advances and challenges in log analysis. Commun ACM. 2012;55(2):55-61. doi:10.1145/2076796.2082137.
  20. Scarfone K, Mell P. Intrusion detection and prevention systems. In: Stavroulakis P, Stamp M, editors. Handbook of information and communication security. Berlin: Springer; 2010. p.177-92. doi:10.1007/978-3-642-04117-4_9.
  21. Ross R, Pillitteri V, Graubart R, Bodeau D, McQuaid R. Developing cyber resilient systems: a systems security engineering approach. Gaithersburg (MD): National Institute of Standards and Technology; 2019.
  22. Mell P, Grance T. The NIST definition of cloud computing. Gaithersburg (MD): National Institute of Standards and Technology; 2011. NIST SP 800-145.
  23. Scarfone K, Souppaya M, Cody A, Orebaugh A. Technical guide to information security testing and assessment. Gaithersburg (MD): National Institute of Standards and Technology; 2008. NIST SP 800-115. doi:10.6028/NIST.SP.800-115.
  24. Guttman B. An introduction to computer security: the NIST handbook. Gaithersburg (MD): National Institute of Standards and Technology; 1995.
  25. Mell P. Acquiring and deploying intrusion detection systems. Gaithersburg (MD): National Institute of Standards and Technology; 1999.
Support