wp3 wisdom software package elias athanasopoulos forth cork, ireland, january 2009
DESCRIPTION
Organization SAPI –Software core, mini Operating System WSIM –Simulated environment Integration (SAPI, WSIM) –WISDOM Software Package –Main front-end 3Elias Athanasopoulos, FORTHWP3TRANSCRIPT
![Page 2: WP3 WISDOM SOFTWARE PACKAGE Elias Athanasopoulos FORTH Cork, Ireland, January 2009](https://reader036.vdocuments.net/reader036/viewer/2022082601/5a4d1b597f8b9ab0599aa65d/html5/thumbnails/2.jpg)
Good News!• WSIM: A software platform to
simulate all-optical security operations. – Antonis Krithinakis, Lubomir Stroetmann,
Elias Athanasopoulos, Georgios Kopidakis, Evangelos P. Markatos.
– In Proceedings of the 4th European Conference on Computer Network Defense (EC2ND 2008). December 2008, Dublin, Ireland.
Elias Athanasopoulos, FORTH WP3 2
![Page 3: WP3 WISDOM SOFTWARE PACKAGE Elias Athanasopoulos FORTH Cork, Ireland, January 2009](https://reader036.vdocuments.net/reader036/viewer/2022082601/5a4d1b597f8b9ab0599aa65d/html5/thumbnails/3.jpg)
Organization• SAPI– Software core, mini Operating System
• WSIM– Simulated environment
• Integration (SAPI, WSIM) –WISDOM Software Package–Main front-end
3Elias Athanasopoulos, FORTH WP3
![Page 4: WP3 WISDOM SOFTWARE PACKAGE Elias Athanasopoulos FORTH Cork, Ireland, January 2009](https://reader036.vdocuments.net/reader036/viewer/2022082601/5a4d1b597f8b9ab0599aa65d/html5/thumbnails/4.jpg)
SAPI• High-Level API – Filter Creation– Firewall Configuration – Bridge with device using DLL provided by
Avanex• Filter creation– Predefined or custom
• Filter processing– Export in a snort-like language
• Filter feeding– WISDOM firewall– WISDOM simulator
4Elias Athanasopoulos, FORTH WP3
![Page 5: WP3 WISDOM SOFTWARE PACKAGE Elias Athanasopoulos FORTH Cork, Ireland, January 2009](https://reader036.vdocuments.net/reader036/viewer/2022082601/5a4d1b597f8b9ab0599aa65d/html5/thumbnails/5.jpg)
Example – Filter Creation
/* e-mail filter example. */SAPI_TCP_Filter *mailFilter = new SAPI_TCP_Filter();
mailFilter->SetDestinationPort(25);
Elias Athanasopoulos, FORTH WP3 5
![Page 6: WP3 WISDOM SOFTWARE PACKAGE Elias Athanasopoulos FORTH Cork, Ireland, January 2009](https://reader036.vdocuments.net/reader036/viewer/2022082601/5a4d1b597f8b9ab0599aa65d/html5/thumbnails/6.jpg)
Example – Feed Rule to Device
SAPI_Firewall *fw = SAPI::Board_Init();
/* e-mail filter example. */SAPI_TCP_Filter *mailFilter = new SAPI_TCP_Filter();
mailFilter->SetDestinationPort(25);mailFilter->Apply(fw);
Elias Athanasopoulos, FORTH WP3 6
![Page 7: WP3 WISDOM SOFTWARE PACKAGE Elias Athanasopoulos FORTH Cork, Ireland, January 2009](https://reader036.vdocuments.net/reader036/viewer/2022082601/5a4d1b597f8b9ab0599aa65d/html5/thumbnails/7.jpg)
Example – Feed Rule to WSIM
SAPI_Simulator *ws = new SAPI_Simulator();
/* e-mail filter example. */SAPI_TCP_Filter *mailFilter = new SAPI_TCP_Filter();
mailFilter->SetDestinationPort(25);ws->Attach(mailFilter->Export());ws->Run();
Elias Athanasopoulos, FORTH WP3 7
![Page 8: WP3 WISDOM SOFTWARE PACKAGE Elias Athanasopoulos FORTH Cork, Ireland, January 2009](https://reader036.vdocuments.net/reader036/viewer/2022082601/5a4d1b597f8b9ab0599aa65d/html5/thumbnails/8.jpg)
Main Front End
8Elias Athanasopoulos, FORTH WP3
Launch WSIM
Set Rules in the actual
device
Rule Inspector
Custom Rules
![Page 9: WP3 WISDOM SOFTWARE PACKAGE Elias Athanasopoulos FORTH Cork, Ireland, January 2009](https://reader036.vdocuments.net/reader036/viewer/2022082601/5a4d1b597f8b9ab0599aa65d/html5/thumbnails/9.jpg)
WSIM – Simulated Environment
• Information source– Real-time, traces
• Configuration– User driven, SAPI’s rule-set
• Stable application
9Elias Athanasopoulos, FORTH WP3
![Page 10: WP3 WISDOM SOFTWARE PACKAGE Elias Athanasopoulos FORTH Cork, Ireland, January 2009](https://reader036.vdocuments.net/reader036/viewer/2022082601/5a4d1b597f8b9ab0599aa65d/html5/thumbnails/10.jpg)
WSIM – Evaluation (40 Gbps)
Elias Athanasopoulos, FORTH WP3 10
Packet Drops due to
Congestion
No False Positives
Overall Processing
![Page 11: WP3 WISDOM SOFTWARE PACKAGE Elias Athanasopoulos FORTH Cork, Ireland, January 2009](https://reader036.vdocuments.net/reader036/viewer/2022082601/5a4d1b597f8b9ab0599aa65d/html5/thumbnails/11.jpg)
WISDOM Software PackageDemo