Presentation is loading. Please wait.

Presentation is loading. Please wait.

OWASP Mantra-OS Because the world is cruel. About Me Attended United Stated Air Force Institute of Technology Defense Acquisition University Platform.

Similar presentations


Presentation on theme: "OWASP Mantra-OS Because the world is cruel. About Me Attended United Stated Air Force Institute of Technology Defense Acquisition University Platform."— Presentation transcript:

1 OWASP Mantra-OS Because the world is cruel

2 About Me Attended United Stated Air Force Institute of Technology Defense Acquisition University Platform Security Engineer at

3 What is Mantra-OS? Mantra-OS is a virtualized attack platform designed around Mantra Security toolkit and OWASP WTE repository.

4 What was Mantra-OS developed for? SCAP testing and professional pen-testing environment optimized for virtual environments. Such as vSphere, XenDesketop, OpenStack, oVirt. Installation media iso and deployable ovf/ova.

5 Mantra-OS & HyTrust Mantra-OS was implemented into HyTrust QA cycle It is used for SCAP testing and Vulnerability verification testing. Is deployed through vCenter.

6 Mantra-OS Virtualization and Security Kernel GrSecurity Kernel patch and OpenVZ Kernel patch. Ganeti for Virtual Cluster KVM implementation as secondary layer of virtualization.

7 Mantra-OS Containers and Sandboxing OpenVZ is used as container controller and lxc with arkose d-bus hook to sandbox desktop. Libvirtd is used as a job handler for virtualization with glib hook.

8 Mantra-OS Virtual Core

9 Mantra-OS Enhanced Security IDS protection with suricata Artillery and honeyd for IPS protection Container based sandboxing AppArmor, SElinux

10 Mantra-OS Security Audit Tools OWASP Zap Burp Maltego Metasploit & Armitage Zenmap

11 Mantra-OS Packet Capture Ettercap Wireshark

12 Mantra-OS Web Application Scanners Skipfish Nikto Gruyere

13 Mantra-OS SQL Injection Sqlbrute Sqlmap Sqlmap intergration with Zap

14 Mantra-OS Intel Collection Maltego


Download ppt "OWASP Mantra-OS Because the world is cruel. About Me Attended United Stated Air Force Institute of Technology Defense Acquisition University Platform."

Similar presentations


Ads by Google