1. Network Specification & Report System for ISEAGE – Phase II Eric Anders Piyush Patel Jonathan Cook Trent Robertson Eric Anders Piyush Patel Jonathan Cook Trent Robertson April 25, 2006 Team: May 06_10 Advisor: Dr. Jacobson Client: Information Assurance Center April 25, 2006 Team: May 06_10 Advisor: Dr. Jacobson Client: Information Assurance Center

2. Outline Definitions What is ISEAGE? Acknowledgements Problem Statement Intended Users and Uses Assumptions and Limitations Design Approaches Definitions What is ISEAGE? Acknowledgements Problem Statement Intended Users and Uses Assumptions and Limitations Design Approaches Project Definition Activities Research Activities Design Activities Testing and Modification Lessons Learned Conclusion Project Definition Activities Research Activities Design Activities Testing and Modification Lessons Learned Conclusion

3. List of Definitions CIDR – Classless Inter-Domain Routing CVS – Concurrent Versions Systems IPv4 – Internet Protocol Version 4 IPv6 – Internet Protocol Version 6 XML – Extensible Markup Language RIP – Routing Information Protocol CIDR – Classless Inter-Domain Routing CVS – Concurrent Versions Systems IPv4 – Internet Protocol Version 4 IPv6 – Internet Protocol Version 6 XML – Extensible Markup Language RIP – Routing Information Protocol

4. What is ISEAGE? Internet-Scale Event and Attack Generation Environment Test-bed Virtual Internet for the research, design, evaluation, and testing of security solutions. Provides a controlled environment where real-world attacks can be played out against different configurations of equipment Internet-Scale Event and Attack Generation Environment Test-bed Virtual Internet for the research, design, evaluation, and testing of security solutions. Provides a controlled environment where real-world attacks can be played out against different configurations of equipment

5. Acknowledgements We would like to thank: Dr. Jacobson for his help in understanding the ISEAGE project and offer of extended financial assistance. Thad Gillispie for his insight into the possible solution of the routing problem in the ISEAGE Network. MSDNAA/Iowa State University for providing Visual Studio.NET 2005 free of charge. We would like to thank: Dr. Jacobson for his help in understanding the ISEAGE project and offer of extended financial assistance. Thad Gillispie for his insight into the possible solution of the routing problem in the ISEAGE Network. MSDNAA/Iowa State University for providing Visual Studio.NET 2005 free of charge.

6. Problem Statement Create a set of tools that will allow a user to define a network specification that will be used to configure ISEAGE. The tools need to show real-time visualization of the ISEAGE network. Ability to display both a latitude/longitude based representation and a network topology layout. Create a set of tools that will allow a user to define a network specification that will be used to configure ISEAGE. The tools need to show real-time visualization of the ISEAGE network. Ability to display both a latitude/longitude based representation and a network topology layout.

7. Operating Environment Microsoft Windows Operating Systems with the.NET framework The application is designed to run on a PC attached to the ISEAGE although it can run on any isolated PC as well. Microsoft Windows Operating Systems with the.NET framework The application is designed to run on a PC attached to the ISEAGE although it can run on any isolated PC as well.

8. Intended Users and Uses Intended Users: Individuals who are technically fluent with the ISEAGE research project. Intended Uses: Defining the configuration of ISEAGE network/sub-networks. Expansion from the ISEAGE network to the entire state of Iowa and beyond. Intended Users: Individuals who are technically fluent with the ISEAGE research project. Intended Uses: Defining the configuration of ISEAGE network/sub-networks. Expansion from the ISEAGE network to the entire state of Iowa and beyond.

9. Assumptions and Limitations Assumptions The application will run on Windows systems only. The configuration tool can run independently of ISEAGE. The output configuration file can be implemented immediately and directly, or it can be stored for later use. Limitations The software shall both configure and report real-time information about ISEAGE. The real-time display shall have two modes: physical layout and network topology. The software shall run on a computer with at least 256 MHz processor and 128MB Memory that is running Windows Operating System. Assumptions The application will run on Windows systems only. The configuration tool can run independently of ISEAGE. The output configuration file can be implemented immediately and directly, or it can be stored for later use. Limitations The software shall both configure and report real-time information about ISEAGE. The real-time display shall have two modes: physical layout and network topology. The software shall run on a computer with at least 256 MHz processor and 128MB Memory that is running Windows Operating System.

10. Two Applications Network Specification Tool Graphically build ISEAGE configurations Network Report Tool Pseudo real-time network statistics Two Applications Network Specification Tool Graphically build ISEAGE configurations Network Report Tool Pseudo real-time network statistics End Product & Other Deliverables

11. Previous Accomplishments Decisions made during Fall 2005 are: Design of both Applications IDE (Visual Studio.NET) Programming Language (C#) Began coding of the Network Specification Tool Decisions made during Fall 2005 are: Design of both Applications IDE (Visual Studio.NET) Programming Language (C#) Began coding of the Network Specification Tool

12. Present Accomplishments Network Specification Tool GUI: 100% Functionality: 73% Network Monitoring Tool GUI: 100% Functionality: 0% Network Specification Tool GUI: 100% Functionality: 73% Network Monitoring Tool GUI: 100% Functionality: 0%

13. Approaches Considered & Used – 1/3 Integrated Developers Environment (IDE) Eclipse Open-source integrated developer environment. It is primarily used with Java therefore it is not operating system dependent. Visual Studio.NET Contains a whole host of tools that can be used to create applications. Contained in the platform are languages Visual C++, Visual Basic, Visual C#, and Visual J#. Selected: Visual Studio.NET Deployment of the application is much easier through the wizard provided by Visual Studio.NET Available free of charge through MSDNAA Integrated Developers Environment (IDE) Eclipse Open-source integrated developer environment. It is primarily used with Java therefore it is not operating system dependent. Visual Studio.NET Contains a whole host of tools that can be used to create applications. Contained in the platform are languages Visual C++, Visual Basic, Visual C#, and Visual J#. Selected: Visual Studio.NET Deployment of the application is much easier through the wizard provided by Visual Studio.NET Available free of charge through MSDNAA

14. Approaches Considered & Used – 2/3 Visualization Tools Google Earth Visualization tool from the perspective of a satellite. It allows users to overlay objects onto the satellite image through the use of KML, a variation of XML. “In-house” coded visualization application Develop our own “in-house” visualization application Selected: Develop “in-house” visualization application Allows the team more freedom Visualization tool will work closer to real-time than if utilized by Google Earth because Google Earth tends to eat up resources. Google Earth would work very well with the respect to extensibility. Visualization Tools Google Earth Visualization tool from the perspective of a satellite. It allows users to overlay objects onto the satellite image through the use of KML, a variation of XML. “In-house” coded visualization application Develop our own “in-house” visualization application Selected: Develop “in-house” visualization application Allows the team more freedom Visualization tool will work closer to real-time than if utilized by Google Earth because Google Earth tends to eat up resources. Google Earth would work very well with the respect to extensibility.

15. Approaches Considered & Used – 3/3 Programming Languages C++ Primary advantage of C++ is that the entire group has used it before Main disadvantage of C++ is that it has few built-in functions compared to C# and Java Java Built-in functions that do not need the manual inclusion of libraries. Easy GUI creation Cross-Platform C# High-level and Low-level functionality Extremely strongly typed object oriented language None of the team members have any experience programming in C# Selected: C# Runs faster than Java C# and Java have similar syntax, so the learning curve will not be great at all GUI’s are extremely easy to build in C# Programming Languages C++ Primary advantage of C++ is that the entire group has used it before Main disadvantage of C++ is that it has few built-in functions compared to C# and Java Java Built-in functions that do not need the manual inclusion of libraries. Easy GUI creation Cross-Platform C# High-level and Low-level functionality Extremely strongly typed object oriented language None of the team members have any experience programming in C# Selected: C# Runs faster than Java C# and Java have similar syntax, so the learning curve will not be great at all GUI’s are extremely easy to build in C#

16. Project Definition Activities ISEAGE Configuration Currently: hand-typed ASCII file Need a quicker and easier method ISEAGE Reporting Currently: packet dumps and limited visualizations Need a more visual and focused method ISEAGE Configuration Currently: hand-typed ASCII file Need a quicker and easier method ISEAGE Reporting Currently: packet dumps and limited visualizations Need a more visual and focused method

17. Research Activities Routing Information Protocols (RIP) Graphing Algorithms (Graph Theory) Google Earth and KML Diagramming in C# Latitude/Longitude conversion and Mapping (GDI+) Icon Creation Routing Information Protocols (RIP) Graphing Algorithms (Graph Theory) Google Earth and KML Diagramming in C# Latitude/Longitude conversion and Mapping (GDI+) Icon Creation

18. Design Activities Create and evaluate custom networks Streamline the ISEAGE configuration process Extensible network object types Topological and Spatial visualizations Assess network stability Network traffic replays Create and evaluate custom networks Streamline the ISEAGE configuration process Extensible network object types Topological and Spatial visualizations Assess network stability Network traffic replays

19. Network Specification Tool GUI

20. Network Report Tool GUI

21. ASCII File Format

22. Replay File Format

23. Implementation Activities Scope of the project changed Unable to complete report tool Diagrammer Module Routing Protocol Latitude/Longitude on the form grid Scope of the project changed Unable to complete report tool Diagrammer Module Routing Protocol Latitude/Longitude on the form grid

24. Testing & Modification Activities Unit testing Monkey testing Generating random or a large set of sequential inputs to independent functions Pre-select testing Inputs which will be sent to a given function with anticipated output, created by the black box tester Integration testing User testing Done by all of the team members by attempting to use the program as a regular user would Beta version will be deployed to the client for testing Unit testing Monkey testing Generating random or a large set of sequential inputs to independent functions Pre-select testing Inputs which will be sent to a given function with anticipated output, created by the black box tester Integration testing User testing Done by all of the team members by attempting to use the program as a regular user would Beta version will be deployed to the client for testing

25. Personal Effort Requirements

26. Name Expected Hours Actual HoursWageTotal Eric Anders176174$10.50$1,827.00 Jonathan Cook175166$10.50$1,743.00 Piyush Patel177163$10.50$1,711.50 Trent Robertson165160$10.50$1,680.00 Grand Total Labor Cost:$6,981.50

27. Resource Requirements

28. Schedules

29. Project Evaluation Project DefinitionFully Met Technology ConsiderationFully Met End-Product DesignPartially Met End-Product ImplementationPartially Met End-Product TestingNot Attempted End-Product DocumentationNot Attempted End-Product DemonstrationNot Attempted Project DeliverablesPartially Met

30. Commercialization There are no commercialization considerations for our project.

31. Additional Work Recommendations ISEAGE Monitoring Tool API for network node specification Diagramming control improvements Improved hit detection Expand layout options RIP Implementation Latitude/Longitude implementation on to the form grid User Manual A detailed reference manual containing how to view, define, and manage the network using the GUI ISEAGE Monitoring Tool API for network node specification Diagramming control improvements Improved hit detection Expand layout options RIP Implementation Latitude/Longitude implementation on to the form grid User Manual A detailed reference manual containing how to view, define, and manage the network using the GUI

32. Lessons Learned What went well? Initial Design Approach Learning the technology What did not go well? Complexity of the overall software What technical knowledge was gained? Programming in C# Diagramming Module What non-technical knowledge was gained? Project management skills Teamwork on a larger scale What went well? Initial Design Approach Learning the technology What did not go well? Complexity of the overall software What technical knowledge was gained? Programming in C# Diagramming Module What non-technical knowledge was gained? Project management skills Teamwork on a larger scale

33. Risk and Risk Management Risk: Loss of a team member Assessment: All team members will track their own progress and notify the team of any concerns or problems that might arise. If the team does lose a member their remaining work will be divided amongst the remaining members. Risk: Insufficient knowledge or experience Assessment: The group will be responsible for assigning tasks to members that have the necessary knowledge to complete them. If no team member feels that they have the necessary knowledge to complete the task, a team effort will be made to learn the required information or a new approach to the problem will be considered. There will be time for learning built into the schedule. Risk: Loss of data Assessment: The team will use a CVS or Subversion server to control the source code for the project. In this way the source will be controlled and tracked in a secure environment. Risk: Failure of approach Assessment: All technologies will be researched to guarantee interoperability. All plans, procedures, and software progress will be submitted to the client for review. Risk: Loss of a team member Assessment: All team members will track their own progress and notify the team of any concerns or problems that might arise. If the team does lose a member their remaining work will be divided amongst the remaining members. Risk: Insufficient knowledge or experience Assessment: The group will be responsible for assigning tasks to members that have the necessary knowledge to complete them. If no team member feels that they have the necessary knowledge to complete the task, a team effort will be made to learn the required information or a new approach to the problem will be considered. There will be time for learning built into the schedule. Risk: Loss of data Assessment: The team will use a CVS or Subversion server to control the source code for the project. In this way the source will be controlled and tracked in a secure environment. Risk: Failure of approach Assessment: All technologies will be researched to guarantee interoperability. All plans, procedures, and software progress will be submitted to the client for review.

34. Closing Summary Enable users will be able to create and evaluate custom networks configured on virtual hardware, defend against simulated attacks and assess network stability leading to a more reliable configuration of network infrastructure. The network specification tool is used with the intent to construct and monitor a virtual network. The report system will be a real-time system that will overlay a map and allow the topology of a network to be monitored. Enable users will be able to create and evaluate custom networks configured on virtual hardware, defend against simulated attacks and assess network stability leading to a more reliable configuration of network infrastructure. The network specification tool is used with the intent to construct and monitor a virtual network. The report system will be a real-time system that will overlay a map and allow the topology of a network to be monitored.

35. Thank You! Questions?