Portable Cybersecurity and Data Protection

Portable Cybersecurity and Data Protection

Aneena Sajad S

UndergraduateDept. of ECE Muslim association college of engineering

Fathima Hussain S

UndergraduateDept. of ECE Muslim association college of engineering

Salma Subair

UndergraduateDept. of ECE Muslim association college of engineering

Nithi S Prem

UndergraduateDept. of ECE Muslim association college of engineering

Abstract – This project presents the design and development of a Portable Cybersecurity and Data Protection Device using the Raspberry Pi Zero 2 W. The system functions as a portable, hardware-level network security solution that monitors real-time network traffic and protects users from cyber threats such as hacking, phishing, port scanning, brute force attacks, and malicious tracking. Unlike traditional software-based antivirus systems, the device operates at the network level by acting as an intermediate security layer between the router and user devices, performing packet inspection, firewall automation, ad and tracker blocking, and intelligent threat detection. Suspicious IP addresses are automatically identified and blocked using predefined security rules and anomaly detection techniques. An optional AI module further enhances detection accuracy by analyzing traffic behavior to identify abnormal activities. The device also provides real-time alerts through visual indicators and display modules to ensure user awareness. The proposed solution is portable, cost-effective, and suitable for homes, educational institutions, and small offices, demonstrating the practical implementation of cybersecurity concepts using embedded systems to enhance network security and data privacy.Keywords—Cyber security, Raspberry Pi Zero 2 W, NetworkSecurity, Packet Inspection, Embedded Systems.

Portable Cybersecurity and Data Protection Aneena Sajad SUndergraduateDept. of ECE

INTRODUCTIONWith the rapid growth of the internet and digitalcommunication, cybersecurity has become a major concern inmodern computing environments. People and organizationsdepend on the internet for communication, data transfer,online transactions, and cloud services.However, thisincreased usage also exposes users to cyber threats such asmalware, phishing, data theft, tracking, and unauthorizedaccess. Therefore, ensuring secure internet usage andprotecting user data is essential. Traditional security methodslike antivirus software and firewalls provide basic protection,but users are still vulnerable due to unsafe browsing,malicious websites, and hidden data collection.Publicnetworks in places like cafés, airports, and institutions oftenlack proper security, increasing cyber risks. Hence, a portableand user-friendly cybersecurity solution is needed to monitorand protect network traffic in real time.

With advancements in embedded systems, compactcybersecurity devices can be developed to enhance networksafety. These systems can monitor internet traffic, blockmalicious domains, prevent ads, and detect suspiciousconnections, providing an extra layer of protection.ThePortable Cybersecurity & Data Protection Device is designedto improve internet security and user privacy. It uses aRaspberry Pi Zero 2 W as the main processing unit to monitorand control network activities, analyzing traffic and filteringharmful connections.The system includes an LCD

EXISTINGSYSTEM

Fig. 1 Block diagram of Existing PortableCybersecurity & Data protection system

The existing block diagram shown in fig.1,represents anetwork-based ad-blocking and monitoring system using aRaspberry Pi. The system is designed to control and filterinternet traffic for devices connected to a local network. Itworks by routing all network requests through a centraldevice that manages domain name resolution and blocksunwanted advertisements or malicious domains before theyreach the user’s device.At the top of the diagram, theInternet acts as the main source of data and online services.When a user tries to access a website or online application,the request first travels from the internet to the DNS Server.The DNS server is responsible for translating websitenames (domain names) into IP addresses so that devicescan communicate with the correct servers on theinternet.After the DNS request is processed, the traffic isforwarded to the Raspberry Pi, which acts as the corecontroller of the system. The Raspberry Pi is configuredwith ad-blocking software that filters DNS requests. If therequest is associated with an advertisement or a blockeddomain RaspberryPi prevents it from reaching the user’sdevice. This improves browsing speed and reducesunnecessary data usage.

display, LED indicators, and an SD card. The LCD showsreal-time system status and alerts, LEDs indicate deviceoperation, and the SD card stores the OS, configurations, andlogs.When suspicious activity or malicious connections aredetected, the device blocks them automatically and notifiesthe user. This helps protect personal data and improvebrowsing privacy.The system is portable, cost-effective, andeasy to deploy, making it suitable for homes, educationalinstitutions, and small offices. It provides an efficient solutionfor enhancing cybersecurity through real-time monitoring anddata protection.

Fig. 2 Block diagram of Proposed Portable Cybersecurity &Data protection system

The advanced block diagram shown in fig. 2 represents animproved network security and ad-blocking system built usinga Raspberry Pi Zero 2W. This system is designed to monitorinternet traffic, block advertisements, detect potential threats,and provide secure internet access for all connected devices.By placing the Raspberry Pi at the center of the network, thesystem can analyze and filter requests before they reach theuser’s devices, improving both security and browsingperformance.At the beginning of the network structure is theWi-Fi Router, which provides internet connectivity andcreates the local network environment.

From the Raspberry Pi, the filtered internet connection is omsent to the Wi-Fi Router. The router distributes the internetconnection to all devices connected to the local network.connection to all Since the filtering process already happens inthe Raspberry Pi, every device connected to this routerautomatically benefits from the ad-blocking system withoutrequiring any additional software installation. The router thenprovides internet access to different user devices such asSmartphones, PCs, and Laptops. Each of these devices sendsits DNS requests through the same network path. As a result,advertisements and unwanted domains are blocked at thenetwork level, level, ensuring a cleaner and safer browsingexperience for all connected devices. Overall, this block thisbloc diagram illustrates a centralized network filteringarchitecture where the Raspberry Pi acts as the main controlunit. By placing the ad-blocking mechanism between the DNSserver and the Wi-Fi router, the system efficiently managesand filters internet traffic for for multiple devicessimultaneously, improving network performance, security,and user experience

III. PROPOSED SYSTEM

All devices such as smartphones, laptops, and PCs connect tothis router to access the internet. The router forwards allinternet traffic through the Raspberry Pi so that the requestscan be analyzed and filtered before reaching the finaldestination.The User Devices block represents devices such assmartphones, laptops, and tablets that generate internetrequests. Whenever a user tries to access a website orapplication, the request is routed through the Raspberry pisystem. This ensures that every request passes through themonitoring and filtering stages, allowing the system tomanage network activity effectively. The central componentof the system is the Raspberry Pi Zero 2W, which acts as themain controller. It processes incoming network traffic andperforms several important tasks such as DNS requestmonitoring, domain filtering, and ad blocking. The RaspberryPi checks whether the requested domain is safe or potentiallyharmful and blocks suspicious or unwanted connections. Thesystem includes several filtering mechanisms. DNS RequestMonitoring captures and analyzes DNS queries to observeinternet usage. Domain Filtering checks requested domainsagainst a blacklist to identify ads or malicious websites. TheAd Blocking Process blocks advertisement domains byredirecting them to fake or null IP addresses, preventing adsfrom loading. Additionally, the Threat Detection moduleidentifies harmful domains related to phishing, malware, orunsafe websites.Finally, the system ensures Safe InternetAccess Control by allowing only secure and clean requests topass through the network. The Alert and Monitoring Unitprovides feedback about the system’s status using interfacessuch as an LED indicator or an LCD/Web interfacedashboard. This allows users or administrators to monitornetwork activity and confirm that the filtering and protectionsystem is functioning properly

The circuit diagram shown in fig. 3 represents the hardwareimplementation of the proposed network monitoring and ad-blocking system using a Raspberry Pi Zero 2W. TheRaspberry Pi Zero 2W acts as the central processing unit thatcontrols the monitoring system, processes network data, andcommunicates with output devices such as LEDs and an LCDdisplay. The system is designed to visually indicate thenetwork status and potential threats detected in the internettraffic. The Raspberry Pi Zero 2W is connected to the internetand acts as the main controller of the system. It processesincoming network data and performs functions such as DNSmonitoring, ad blocking, and threat detection. The RaspberryPi uses its GPIO (General Purpose Input Output) pins to

IV. METHODOLOGY

Fig. 3 Circuit diagram of portable cyber securityand data protection device

A. Circuit diagram

.

communicate with external components such as the LCDdisplay and status indicator LEDs.An LCD display moduleis connected to the Raspberry Pi to show system informationand network status. The LCD uses communication pins suchas VCC, GND, SDA, and SCL for power supply and datacommunication. The VCC pin provides the power supply,while the GND pin acts as the ground reference. The SDAand SCL pins are used for I2C communication between theRaspberry Pi and the LCD display, allowing the system todisplay messages related to network activity, alerts, andsystem status. The circuit also includes three LED indicatorsto visually represent different network conditions.

Each LED is connected to the Raspberry Pi through a 330-ohm resistor, which protects the LED by limiting thecurrent flowing through it. These LEDs provide a simplevisual indication of whether the network traffic is normal,suspicious, or under attack.The green LED representsnormal network operation. When the system detects thatinternet traffic is safe and no suspicious activity is found,the Raspberry Pi activates the green LED. This indicatesthat the network is functioning properly and users cansafely access the internet.The yellow LED indicatessuspicious network activity. If the system detects unusualor potentially unsafe domains during DNS monitoring, theRaspberry Pi triggers the yellow LED to alert the user.This acts as an early warning signal that the system hasdetected unusual traffic that may require attention.The redLED represents a detected attack or highly maliciousactivity. When the Raspberry Pi identifies a harmfuldomain or potential cyber threat, the red LED is activatedto alert the user immediately. This warning allows the useror system administrator to take appropriate action toprotect the network.Overall, the circuit diagramdemonstrates how the Raspberry Pi Zero 2W integrateswith an LCD display and LED indicators to create a simpleyet effective network monitoring and alert system. Thecombination of visual indicators and display output helpsusers easily understand the network status and ensuresbetter monitoring of internet security within the system.

Step 1: System and Hardware Initialization

while GND acts as the ground connection. The SDA (SerialData) and SCL (Serial Clock) pins allow the Raspberry Pi tosend data to the LCD. Through this display, the system showsmessages such as network status, alerts, and systeminformation. The circuit also includes three LEDs that act asvisual indicators of the system’s status. Each LED isconnected to a GPIO pin of the Raspberry Pi through a 330-ohm resistor. The resistor is used to limit the current flowingthrough the LED and protect it from damage. These LEDshelp users quickly understand the condition of the network.The green LED indicates normal network activity. When theRaspberry Pi detects that the internet traffic is safe and noharmful domains are present, it sends a signal through thecorresponding GPIO pin to turn on the green LED. Thisshows that the system is operating normally and the networkis secure. The yellow LED represents suspicious activity. Ifthe Raspberry Pi detects unusual traffic patterns or potentiallyunsafe domains, it activates the yellow LED. This acts as awarning signal that the system has identified suspiciousbehavior that may require attention or monitoring. The redLED indicates a detected attack or malicious activity. Whenthe system identifies a harmful website, phishing attempt, ormalware-related domain, the Raspberry Pi activates the redLED. At the same time, the LCD display may show a warningmessage. This allows the user or administrator to quicklyunderstand that a security threat has been detected andappropriate action may be required.

B. Working

C. Algorithm

The circuit diagram shows the working of a networkmonitoring and ad-blocking system using a Raspberry PiZero 2W. In this system, the Raspberry Pi acts as the maincontroller that processes internet traffic and provides visualindications of the network status. The system is designed todetect normal traffic, suspicious activity, and potentialattacks, and then display the status through LEDs and anLCD displayThe working of the system begins with theinternet connection. The Raspberry Pi Zero 2W is connectedto the internet and acts as a network controller. It monitorsthe incoming and outgoing traffic from the connecteddevices. All network data passes through the Raspberry Pi,allowing it to analyze requests and identify advertisementdomains or malicious websites. Once the network traffic isreceived, the Raspberry Pi processes the data using itsinternal software. The system checks DNS requests andfilters domain names to determine whether they are safe orharmful. Based on the analysis results, the Raspberry Pidecides whether the network traffic is normal, suspicious, ora potential attack.

The LCD display is connected to the RaspberryPi using theI2C communication interface.The pins used include VCC,GND, SDA, and SCL. VCC provides power to the display,

1.Start the device and power on the system.2.Initialize the Raspberry Pi Zero 2 W microcontroller. 3.Loadthe operating system and start the cybersecurity monitoringprogram.4.Initialize all connected components including LCD display,LED indicators, and SD card storage.5.Establish network connection through Wi-Fi for monitoringinternet traffic.Step 2: Network Monitoring1.Start continuous monitoring of incoming and outgoingnetwork traffic.2.Analyze data packets passing through the network.3.Compare domain requests with the list of known maliciousor tracking domains.4.Display the message “SYSTEM ACTIVE – NETWORKPROTECTED” on the LCD display.Step 3: Threat Detection1.Check whether any suspicious or malicious domain isdetected.2.If no threat is detected, continue monitoring the networktraffic.3.If a suspicious request or harmful connection is detected,mark it as a potential threat.Step 4: Threat Blocking1.Block the detected malicious domain or harmful website.2.Prevent the connection from reaching the user device.3.Update the system log with the blocked requestinformation.

Step 5: User Notification1.Display a warning message such as “THREAT BLOCKED– MALICIOUS DOMAIN DETECTED” on the LCD display.2.Turn on LED indicator to notify the user about the blockedthreat.3.Store the threat details and timestamp in the system log fileon the SD card.Step 6: Data Logging1.Record all network activities including allowed and blockedrequests.2.Store logs securely in the SD card for analysis andmonitoring.3.Maintain a record of detected trackers, advertisements, andmalicious websites.Step 7: Continuous Protection1.Resume monitoring the network continuously.2.Wait for new network requests or suspicious activities.3.Repeat the monitoring, detection, and blocking processautomatically.

V. EXPERIMENTAL RESULT

Fig. 4 Flowchart of DNS-Based Malicious DomainDetection and Blocking

Fig.5Hardware Implementation and Result Display

Fig.6Detection of Threatand Activation of BlockingSystem withLED Indication

The proposed system, developed using the Raspberry Pi Zero2 W successfully functions as a portable network-level adblocker and cybersecurity solution, delivering improvedperformance and enhanced protection By effectively filteringout advertisements, tracking scripts, and heavy media content,the system improves browsing speed, enabling web pages toload faster and providing a smoother user experience. Inaddition, it reduces overall bandwidth consumption byblocking unnecessary background data, thereby optimizingnetwork usage. The system also demonstrates strong proactivesecurity capabilities by blocking access to known maliciousdomains, phishing websites, and ad servers at the networklevel. This ensures that all connected devices are protectedfrom potential cyber threats such as malware attacks andunauthorized data access. Real-time monitoring is achievedthrough an LCD, which displays information such as blockedadvertisements, network activity, and system status, allowingusers to continuously monitor the system’s operation

D. Flowchart

Furthermore, LED indicators provide immediate visualfeedback by indicating normal conditions, suspicious activity,or potential security threats.Overall, the system operates as acentralized security layer for all connected devices, includingsmartphones, laptops, and IoT devices, eliminating the needfor separate security installations. With its compact design,low power consumption, and effective performance, thesystem provides a reliable and user- friendly solution forportable cybersecurity and network optimization.

VI .ACKNOWLEDGMENTS

I would like to express my sincere gratitude to professions,department of electronics and communication engineering forthere valuable guidance and there encouragement in pursingthis paper

VII. CONCLUSION

he development of a portable cybersecurity and dataprotection device is an important initiative in the moderndigital era. As people increasingly rely on smartphones,laptops, and loT devices for communication, work, and datastorage, the risk of cyber threats also grows.

VIII. REFERENCES

[9] H. Sonawane, M. Patil, S. Patil, U. Thakur, B. Patil and A. Marathe,”Middleware Device for Advertisement Blocking,” 2022 InternationalConference on Futuristic Technologies (INCOFT), Belgaum, India,2022, pp. 1-5, doi: 10.1109/INCOFT55651.2022.10094371.

[10] A. M. Nugraha, R. M. R. Erlangga, F. C. Cindy, N. Karna and A. I.Irawan, “Analysis of Network-Wide Ad Blocker Using MikrotikRouterBoard and Raspberry Pi for Enhancing Network QoS,” 2025IEEE International Conference on Industry 4.0, Artificial Intelligence,and Communications Technology (IAICT), Bali, Indonesia, 2025, pp.150-157, doi: 10.1109/IAICT65714.2025.1110066

[11] Geary, S. Malware, phishing, spyware and viruses – what’s thedifference?, August 2017

[12] Mary, L., Dheen, S. N., & Narayanan, S. K. Network-wide rangead-blocker using Raspberry Pi. International Journalof Pure and Applied Mathematics, vol. 119, pp. 1771-1775, 2018.

[13] M. C. Nawej, “Evaluation of virtual private network impact onnetwork performance,” 2016.

[1] A. S. Visvanathan, Y. Nathan and M. Abdulnabi, “A Raspberry PiSecurity Device Using VPN and Adblocker,” 2022 IEEE 2nd InternationalConference on Mobile Networks and Wireless Communications (ICMNWC),Tumkur, Karnataka, India, 2022, pp. 1-5.

[2] J. Jeremiah, “Intrusion Detection System to Enhance Network SecurityUsing Raspberry Pi Honeypot in Kali Linux,” 2019 Intemational Conferenceon Cybersecurity (ICoCSec), Negeri Sembilan, Malaysia, 2019, pp. 91-95.

[3] E. H. Sonawane, M. Patil, S. Patil, U. Thakur, B. Patil and A. Marathe,”Middleware Device for Advertisement Blocking.” 2022 InternationalConference on Futuristic Technologies (INCOFT), Belgaum, India, 2022, pp.1-5

[4] A. M. Nugraha, R. M. R. Erlangga, F. C. Cindy, N. Kana and A. 1.Irawan, “Analysis of Network-Wide Ad Blocker Using Mikrotik RouterBoardand Raspberry Pi for Enhancing Network QoS,” 2025 IEEE InternationalConference on Industry 4.0, Artificial Intelligence, and CommunicationsTechnology (IAICT), Bali, Indonesia, 2025, pp 150-157.

[5] J. Marot and S. Bourennane, “Raspberry Pi for image processingeducation,” 2017 25th European Signal Processing Conference (EUSIPCO),Kos, Greece, 2017, pp. 2364-2366, doi: 10.23919/EUSIPCO.2017.8081633

[6] B. Balon and M. Simić, “Using Raspberry Pi Computers in Education,”2019 42nd International Convention on Information and CommunicationTechnology, Electronics and Microelectronics (MIPRO), Opatija, Croatia,2019, pp. 671-676, doi: 10.23919/MIPRO.2019.8756967.

[7] F. López, F. J. Torres, V. A. Ramírez, D. A. Núñez, R. Corona and A. R.López, “Raspberry Pi for Implementation of Web Technology in anAutomation Process,” 2019 IEEE International Autumn Meeting on Power,Electronics and Computing (ROPEC), Ixtapa, Mexico, 2019, pp. 1-6, doi:10.1109/ROPEC48299.2019.9057040.

[8] A. S. Visvanathan, Y. Nathan and M. Abdulnabi, “A Raspberry PieSecurity Device Using VPN and Adblocker,” 2022 IEEE 2nd InternationalConference on Mobile Networks and Wireless Communications (ICMNWC),Tumkur, Karnataka, India, 2022, pp. 1-5, doi:10.1109/ICMNWC56175.2022.10031864.

While these technologies offer convenience and mobility,many of them lack strong built-in security systems. Thisproject highlights the need for additional protection tosafeguard sensitive information from evolving cyber threats.One of the key findings of the project is the importance ofphysical security measures. Device theft, lost hardware, andthe use of unsecured public Wi-Fi networks can exposepersonal and professional data to serious risks. A portablesecurity device can create a secure environment or “safebubble” around connected devices, helping to protect dataeven when users are in potentially unsafe digitalenvironments. The project also emphasises the need forcomprehensive, multi-layered data protection. Effectivesecurity solutions should include strong data encryption,secure VPN connectivity, and continuous monitoring ofconnected devices. By combining these protective layers, thedevice can reduce the risk of threats such as data theft,unauthorised access, and Man-in- the-Middle attacks,ensuring safer digital communication and storage.Inconclusion, this project demonstrates that hardware-basedsecurity solutions play a vital role in bridging the gap betweenmobility and cybersecurity. Future improvements couldinclude Al-driven threat detection systems that analysebehavior patterns to identify advanced malware and cyberattacks. By enabling automatic security protocols andsimplifying complex protection methods, such devicesempower users to secure their digital information withoutrequiring advanced technical expertise.