1. Team MITRE Sentinel Final Presentation
Mark Nowicki
Michael Dunn
Kate Brown
Dave Tittle
Kate
12/8/2008
Purdue University - CS 307

2. Overview Motivation Product Features Design Results Challenges
Future Work
Plan for Demo
Kate
12/8/2008
Purdue University - CS 307

3. Motivation
MITRE produces XML files that contain workstation configuration information
However, XML file checking is:
Tedious
Time consuming
Prone to human error
Automation will speed the process and decrease error
Kate
12/8/2008
Purdue University - CS 307

4. Product Features Core functionality: Overall:
Retains, compares, and parses XML files
Baseline management (Previous configurations)
Alerts administration of crucial differences
Overall:
Reduces time needed to monitor a network
Mark
12/8/2008
Purdue University - CS 307

5. Design Solution: Python and MySQL implementation Open Source Solution
Mark
12/8/2008
Purdue University - CS 307

6. Design, cont.
Mark
12/8/2008
Purdue University - CS 307

7. Design, cont.
Mark
12/8/2008
Purdue University - CS 307

8. Design, cont.
Mark
12/8/2008
Purdue University - CS 307

9. Experiments Inexperience: Python & MySQL
Software Engineering Practices
Deadlines
Metrics
Code Coverage (PyUnit)
Mark
12/8/2008
Purdue University - CS 307

10. Results No Test Bed Trouble Out of the Box Performance
Configurations Files
Performance Testing
Trouble Out of the Box
Software not perfect as-is
Component functionality
Performance
Overhead: Database and FTP
Dave
12/8/2008
Purdue University - CS 307

11. Challenges New Language, New Environment Freedom, Horrible Freedom
Lessons Learned:
Setting Boundaries
Overhead Time
Time Management
SVN for documentation
Assembla.com
Dave
12/8/2008
Purdue University - CS 307

12. Robustness Extensive error checking If one file goes bad:
error message returned
move to next file (continue execution)
Mike
12/8/2008
Purdue University - CS 307

13. Future Work Requirements not met: Additional Features Scheduler System
Heartbeat
message system
Not configured to specific MITRE system
Logging System
Additional Features
Graphical User Interface
Streamlined Installation Configuration
Multiple Databases
Mike
12/8/2008
Purdue University - CS 307

14. Future Work, cont. Pitfalls of Open Source Solutions: Infancy
Configuration required
No Out of Box functionality
Mike
12/8/2008
Purdue University - CS 307

15. Demo Plan Show Test Environment (MySQL) Test individual parts Execute
Transfer
Rule
Execute system
Execute All
Mike
12/8/2008
Purdue University - CS 307

16. Questions? Thank you for your time!
Kate
Special Thanks to Corporate Partner Dan Aiello, MITRE
Thank you for your time!
12/8/2008
Purdue University - CS 307

17. 12/8/2008
Purdue University - CS 307

18. Mike
12/8/2008
Purdue University - CS 307

19. Mike
12/8/2008
Purdue University - CS 307

20. Mike
12/8/2008
Purdue University - CS 307