secubox-openwrt/package/secubox/luci-app-iot-guard/root/usr/share/rpcd/acl.d/luci-app-iot-guard.json
CyberMind-FR 8ef0c70d0f feat(iot-guard): Add IoT device isolation and security monitoring
Backend (secubox-iot-guard):
- OUI-based device classification with 100+ IoT vendor prefixes
- 10 device classes: camera, thermostat, lighting, plug, assistant, etc.
- Risk scoring (0-100) with auto-isolation threshold
- Anomaly detection: bandwidth spikes, port scans, time anomalies
- Integration with Client Guardian, MAC Guardian, Vortex Firewall
- iot-guardctl CLI for status/list/scan/isolate/trust/block
- SQLite database for devices, anomalies, cloud dependencies
- Traffic baseline profiles for common device classes

Frontend (luci-app-iot-guard):
- KISS-style overview dashboard with security score
- Device management with isolate/trust/block actions
- Vendor classification rules editor
- Settings form for UCI configuration
- RPCD handler with 11 methods
- Public ACL for unauthenticated dashboard access

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-11 10:36:04 +01:00

43 lines
704 B
JSON

{
"luci-app-iot-guard": {
"description": "IoT Guard - Device Isolation & Security",
"read": {
"ubus": {
"luci.iot-guard": [
"status",
"get_devices",
"get_device",
"get_anomalies",
"get_vendor_rules",
"get_cloud_map"
]
},
"uci": ["iot-guard"]
},
"write": {
"ubus": {
"luci.iot-guard": [
"scan",
"isolate_device",
"trust_device",
"block_device",
"add_vendor_rule",
"delete_vendor_rule"
]
},
"uci": ["iot-guard"]
}
},
"unauthenticated": {
"description": "Public access for IoT Guard dashboard",
"read": {
"ubus": {
"luci.iot-guard": [
"status",
"get_devices"
]
}
}
}
}