CyberMind-FR
8ef0c70d0f
Backend (secubox-iot-guard): - OUI-based device classification with 100+ IoT vendor prefixes - 10 device classes: camera, thermostat, lighting, plug, assistant, etc. - Risk scoring (0-100) with auto-isolation threshold - Anomaly detection: bandwidth spikes, port scans, time anomalies - Integration with Client Guardian, MAC Guardian, Vortex Firewall - iot-guardctl CLI for status/list/scan/isolate/trust/block - SQLite database for devices, anomalies, cloud dependencies - Traffic baseline profiles for common device classes Frontend (luci-app-iot-guard): - KISS-style overview dashboard with security score - Device management with isolate/trust/block actions - Vendor classification rules editor - Settings form for UCI configuration - RPCD handler with 11 methods - Public ACL for unauthenticated dashboard access Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
27 lines
635 B
JSON
27 lines
635 B
JSON
{
|
|
"class": "assistant",
|
|
"description": "Voice assistants (Echo, Google Home, HomePod)",
|
|
"expected_behavior": {
|
|
"bandwidth": {
|
|
"avg_kbps_in": 10,
|
|
"avg_kbps_out": 20,
|
|
"peak_kbps_out": 500,
|
|
"continuous_stream": false
|
|
},
|
|
"activity_hours": "24/7",
|
|
"common_ports": [443, 8443, 4070],
|
|
"cloud_services": ["alexa.amazon.com", "google.com", "apple.com"],
|
|
"protocols": ["https", "mqtt", "coap"]
|
|
},
|
|
"risk_indicators": {
|
|
"high": [
|
|
"continuous_audio_upload",
|
|
"connection_to_foreign_ip"
|
|
],
|
|
"medium": [
|
|
"high_query_rate",
|
|
"new_skill_connection"
|
|
]
|
|
}
|
|
}
|