Harman Patil (Editor)

DAVIX

Updated on
Edit
Like
Comment
Share on FacebookTweet on TwitterShare on LinkedInShare on Reddit
OS family
  
Unix-like

Source model
  
Open source

Working state
  
Current

Kernel type
  
Monolithic kernel

DAVIX

Developer
  
Jan Monsch, Raffael Marty

Latest release
  
v 1.0.1 / August 6, 2008; 8 years ago (2008-08-06)

DAVIX is a Live CD based on Slackware for the purposes of computer security operations. The distribution focuses on data analysis and visualization. DAVIX stands for Data Analysis and VIsualization linuX. It is the first Live CD to integrate so many visualization tools. The long-term goal for the distribution is to provide a good set of tools supporting the complete process of visual data analysis.

Contents

Jan Monsch began work on the CD in December 2007. After discussions with Raffael Marty in January 2008, Jan agreed to produce the CD for "Applied Security Visualization" based on a list of utilities Raffael had discussed in the book.

Features

DAVIX contains a collection of more than 25 free tools for data processing and visualization. Some examples of the tools are:

  • Data Capture - tcpdump, PADS, p0f, Snort (software), Wireshark
  • Data Processing - Chaosreader, GeoIP, tcpreplay
  • Data Visualization - AfterGlow, Cytoscape, Graphviz, MRTG, R Project, TimeSearcher, TNV
  • The DAVIX CD ships with a 15 chapter manual which covers DAVIX use and customization with examples and screenshots. Additionally, most utilities on the system have documentation pages.

    The DAVIX CD is based on Slax.

    Security visualization

    Computer information security visualization is a form of Visualization (computer graphics). In enterprise environments, computer security information can be generated in very large volumes, which can become very difficult to analyze without a visual context. Using DAVIX, a security engineer can visually spot anomalies in network traffic such as changes in IP sources/destinations, network protocols, application protocols, traffic patterns, frequency, and volume.

    Current State

    DAVIX was released at Black Hat Briefings/DEF CON in August 2008.

    References

    DAVIX Wikipedia