Skip to content

Final project notes

Spiral one

Hardening

Linux Server Hardening Checklist for Enterprises

  • SSH keepalives

Audit

ssh Server Audit

(Piawake)
    │
    └── eth0
         │
         ▼
(Piception)
    │
    └── LUKS encrypted host
         │
         ▼
(Dream2 VM)
    │
    └── .dream_deeper
         │
         ▼
(totem.vault.enc)
    │
    └── ext4 filesystem
         │
         ▼
The Totem
Layer Protection
Router Port forwarding only
Piawake Hardened SSH, firewall, Fail2ban
Ethernet Network isolation
Piception No direct Internet access
Dream2 Encrypted VM
Totem Encrypted vault
Dream1 Decoy USB
Trap Deception
Human attacker AI attacker
Creative Systematic
Curious Tireless
May notice unusual patterns Executes many files automatically
May be distracted by decoys Likely to find common filenames