Quiet-Ears v6.0 Pro: An Open-Source, Heuristic-Based Defense Node for Edge-Local Network Security

Quiet-Ears v6.0 Pro is an advanced, edge-local personal defense node designed to harden personal networks against active local threats. Unlike traditional cloud-dependent security solutions, this system utilizes a continuous baseline-and-anomaly paradigm, providing a transparent, modular, and privacy-first defense framework suitable for ARM-based commodity hardware (e.g., Raspberry Pi 5). System Architecture The project implements a "behavioral defense engineering" philosophy centered on the principle of \textit{Baseline Coherence}: establishing a stable operational state, monitoring for divergence, and applying automated mitigation. The system leverages native Linux kernel firewalling (\texttt{nftables}), event-driven hardware monitoring (\texttt{udev}), and heuristic scanning modules to detect and mitigate malicious activity without off-device telemetry. Key Capabilities Network Defense: Anomaly-based detection for network downgrade attacks and routing manipulation using custom UDP canary baits. Wireless Security: Real-time identification of rogue WiFi access points (Evil Twins) and persistent monitoring of unauthorized Bluetooth Low Energy (BLE) trackers. Hardware Hardening: Automated USB/Power-Delivery threat quarantine using surgical hardware power control (\texttt{uhubctl}). Edge-Compute Privacy: All processing occurs locally, removing dependency on opaque cloud services. Technical Scope Target Architecture: ARM64 (Raspberry Pi OS Bookworm). Implementation: Python 3 daemon with systemd integration. Mitigation Strategy: Dynamic \texttt{nftables} set management for surgical, kernel-level traffic drops. Disclaimer Quiet-Ears v6.0 Pro is designed as an augmentation tool for personal network security. It is provided as-is for research and defensive prototyping purposes. Users are expected to adhere to standard device security hygiene and independent operational security (OPSEC) practices. Orange forever!