SnIPS Implementation and GUI 3 rd Presentation

1. SnIPS Implementation and GUI3rd Presentation Tsung-Hsi Wu, M.S.E. Department of Computing and Information Science Kansas State University

2. Outline • Action Item • Final Software Production Demo • Component Design • Assessment Evaluation • Project Evaluation

3. Outline • Action Item • Final Software Production Demo • Component Design • Assessment Evaluation • Project Evaluation

4. Action Item • Item to be inspected (Previously…) : • UML Diagrams: package, component, deploy class, sequence diagrams • Item to be inspected • Formal Requirement Specification: USE/OCL

5. Action Item

6. Outline • Action Item • Final Software Production Demo • Component Design • Assessment Evaluation • Project Evaluation

7. Final Software Production Demo • What are the new features ? • Synchronous -> Asynchronous • XSB Query Option

8. Outline • Action Item • Final Software Production Demo • Component Design • Assessment Evaluation • Project Evaluation

9. Component Design • Component Diagram

10. Component Design • Reactor Pattern Structure

11. Component Design • Command Pattern Structure

12. Component Design • Command Pattern Structure: Set Time Button

13. Component Design • Command Pattern Structure: Start Snort Button

14. Component Design • Command Pattern Structure: RadioBox

15. Component Design • Parser:

16. Component Design • Parser: • Result.txt • int(probeOtherMachine('192.168.10.80',external),c,range(1904834156,0)) strengthenedPf • int(probeOtherMachine('192.168.10.80',external),l,range(1904834156,0)) summarizedFact • skolem(0) • obsMap.P • obsList(obsFacts(0),[oid_1299,oid_1405,oid_1442,oid_1476,oid_1488,oid_1520,oid_1790,oid_6851]). • obs.P • obs(oid_1299, snort('1:1201', '192.168.10.80', '128.111.43.65', 1039206341)). • obs(oid_1405, snort('1:1201', '192.168.10.80', '128.111.43.65', 1039206357)). • obs(oid_1442, snort('1:1201', '192.168.10.80', '128.111.43.65', 1039206358)).

17. Outline • Action Item • Final Software Production Demo • Component Design • Assessment Evaluation • Project Evaluation

18. Assessment Evaluation • Test Suite 1: Operating Snort

19. Assessment Evaluation • Test Suite 2: Operating SnIPS

20. Assessment Evaluation • Test Suite 2: Operating SnIPS

21. Assessment Evaluation • Test Suite 3: Trace Output Webpage

22. Outline • Action Item • Final Software Production Demo • Component Design • Assessment Evaluation • Project Evaluation

23. Project Evaluation: SLOC • Project Plan 2.0 : • Phase I : 1200 • Phase II : 2020 (+ ~800 ) • Phase III : 2700 (+ ~700 ) • Actual SLOC: cloc-1.09

24. Project Evaluation: SLOC

25. Project Evaluation: Time Duration • Project Plan 2.0 : • Actual Duration

26. Project Evaluation: Time Duration

27. Project Evaluation: Summarization • Replace Linux Command to Simple Buttons • Convert Plain Text File to Webpage with Links • Snort Rules & Description • Payload • Current Users: • System Administrators • Researchers

28. Project Evaluation: Lesson Learnt • Software Management and Software Engineering Design • Flexibility of Architecture Design • Software Prototypes

29. SnIPS Implementation and GUI Questions &Answers