STM Journals Peer-reviewed research from Consortium e-Learning Network

Journal of Open Source Developments Original Research

Securix: An Open-Source Security-based Linux Distribution for Novice Cyber Security Enthusiasts

  1. Riona Maria Varghese Department of Computer Science and Engineering, Saintgits College of Engineering, Pathamuttom
  2. Neeraja Anil Department of Computer Science and Engineering, Saintgits College of Engineering, Pathamuttom
  3. Nidhin Anil Department of Computer Science and Engineering, Saintgits College of Engineering, Pathamuttom
  4. Nikhil John Jose Department of Computer Science and Engineering, Saintgits College of Engineering, Pathamuttom
  5. Arun Madhu Department of Computer Science and Engineering, Saintgits College of Engineering, Pathamuttom
  6. Justin Mathew Department of Computer Science and Engineering, Saintgits College of Engineering, Pathamuttom

Abstract

In the ever-evolving field of cybersecurity, the need for accessible and user-friendly tools in favor of beginner users has never been greater. The existing ethical hacking-related operating systems, while powerful, often overwhelm beginners with their complexity. The main objective of this project is to bridge the gap by providing an operating system for novice cyber enthusiasts looking to explore the world of ethical hacking and security. The proposed operating system will provide informative and user-friendly applications that simulate different attacks such as XSS attacks, SQL injection, Wi-Fi attacks, and Distributed Denial-of-Service (DDoS) attacks, thereby allowing the users to gain hands-on experience of the same. The app will be developed using the PyQt6 framework for the frontend, with Firebase serving as the backend. The operating system is created using Linux From Scratch to provide a minimal system with only the needed tools. The applications provide a brief tutorial on what each attack is, what type of weakness it depends on, and what exploits are possible. It also introduces the user to a few common sets of tools that are used for exploiting these attacks. As a unique learning platform, our operating system focuses on simplicity and aims to be a stepping stone for absolute beginners to be able to solidify their foundations and navigate through the field of cybersecurity with ease and confidence.

Keywords

References (10)

  1. Shrivastava P, Jamal MS, Kataoka K. EvilScout: Detection and Mitigation of Evil Twin Attack in SDN Enabled WiFi. IEEE Transactions on Network and Service Management. 2020;17(1):89-102. doi:10.1109/tnsm.2020.2972774
  2. Rodríguez GE, Torres JG, Flores P, Benavides DE. Cross-site scripting (XSS) attacks and mitigation: A survey. Computer Networks. 2020;166:106960. doi:10.1016/j.comnet.2019.106960
  3. Crespo-Martínez IS, Campazas-Vega A, Guerrero-Higueras ÁM, Riego-DelCastillo V, Álvarez-Aparicio C, Fernández-Llamas C. SQL injection attack detection in network flow data. Computers & Security. 2023;127:103093. doi:10.1016/j.cose.2023.103093
  4. Balarezo JF, Wang S, Chavez KG, Al-Hourani A, Kandeepan S. A survey on DoS/DDoS attacks mathematical modelling for traditional, SDN and virtual networks. Engineering Science and Technology, an International Journal. 2022;31:101065. doi:10.1016/j.jestch.2021.09.011
  5. Kali Linux. (2024). Should I Use Kali Linux? Kali Linux Documentation. [online] Kali Linux. Available from: https://www.kali.org/docs/introduction/should-i-use-kali-linux/
  6. Riverbank Computing. (2024). What is PyQt? Introduction. [online] Available from: https://riverbankcomputing.com/software/pyqt/intro
  7. Gupta S, Gupta BB. Cross-Site Scripting (XSS) attacks and defense mechanisms: classification and state-of-the-art. International Journal of System Assurance Engineering and Management. 2015;8(S1):512-530. doi:10.1007/s13198-015-0376-0
  8. Halbouni A, Ong LY, Leow MC. Wireless Security Protocols WPA3: A Systematic Literature Review. IEEE Access. 2023;11:112438-112450. doi:10.1109/access.2023.3322931
  9. Anonymous. (2014). BlackArch Linux - Penetration Testing Distribution. [online] Hacking Reviews. Available from: https://www.hacking.reviews/2017/09/blackarch-linux-penetration-testing.html
  10. Linux From Scratch (LFS). (2024). Welcome to Linux From Scratch! [online] Available from: https://www.linuxfromscratch.org/ ‌
Support