Improving the security of the small business network with the Raspberry Pi ecosystem

In our diploma thesis, we explored the use of the Raspberry Pi microcomputer to enhance security in small businesses. We examined the Linux operating system that powers the Raspberry Pi and focused on cost-effective solutions for companies with trained personnel or external IT support.

As part of our research, we installed a Pi-hole, which allowed us to monitor the network and block malicious domains and advertisements. Pi-hole was crucial in improving DNS query efficiency, which consequently enhanced network security and improved the user experience for employees.

Additionally, we reduced the risk of virus infections and malware attacks, leading to better data protection for the company. We provided employees with secure access to the network even outside the company by setting up a VPN server.

For this, we used the WireGuard and OpenVPN platforms. The secure VPN connection was essential for protecting sensitive information and allowed employees to access company resources for remote work. A secure connection was also available for access outside Slovenia, as long as the work device was connected to an active internet connection.

During the implementation of these solutions, we encountered various technical challenges, particularly with the use of static IP addresses, which required additional configuration and extended the setup time. To collect data on the status of the microcomputer and the Linux system, we used the Docker platform and containerization system. This approach provided us with greater control and stability over the entire system.

Periodically, we performed connection speed tests in the background, which we then visualized with graphs using the Speedtest Tracker web interface. Using Grafana and Prometheus in Docker, we displayed memory usage, CPU load and temperature, disk usage, and Pi-hole security metrics.

We performed configuration and system monitoring through the terminal using tools such as Putty, WinSCP, and Notepad++, and visualized data through the Chrome web browser. This approach enabled easy management of various system components and ensured data transparency.

For hypothesis testing and achieving objectives, we employed a combination of quantitative and qualitative methods. Quantitative data included speed test results and system performance analysis, while qualitative data was derived from the experiences of implementation and configuration throughout the thesis.