Protecting Home Devices from Malicious or Blacklisted Websites

The majority of the devices on a home network have unrestricted outbound connectivity to the Internet. (Barcena and Wueest, 2015) Other than the use of opendns, which only provides some protection against phishing, fraud and limited blacklisting, a homeowner's options are limited. To provide protection from known malicious sites and produce DNS query logs for further detailed analysis, a simple virtual machine set up with DNS is proposed. When coupled with opendns, unlimited blacklisting capability and automatic updates to block malicious sites from all devices is provided. The solution also provides the capability to analyze all the DNS logs using a log based Intrusion Detection System like OSSEC.