Heimdallur - Interface For Publicly Accessible Internet Services

Abstract

With an ever-expanding network of computers and devices connected to the internet, the attack surface and potential for cyber threats increases as well. As a precondition for mitigating this at scale, oversight over the state of security on the internet is required. Towards that, the internet threat scanner Heimdallur was developed to scan the Icelandic internetwork and gather information about potential security vulnerabilities. This project extends Heimdallur by providing a web application that presents the gathered data in such a way that penetration testers and security authorities can easily navigate through the data in hope of preventing future cyber attacks. This report contains information about how we designed and implemented the web application and our GraphQL API. The application is a search engine that allows users to filter the data using one or more specialized filters. The data provided by Heimdallur contains detailed information about the status of all internet servers in Iceland. For now, the application will solely be used by employees at Syndis and CERT-IS, though it might someday become accessible to the general public.