Configuration Mistakes Research Articles

Designing and Evaluating a Flexible and Scalable HTTP Honeypot Platform: Architecture, Implementation, and Applications

Digitalization of our economy and society has ushered in notable productivity increases but has also exposed more of our infrastructures and systems to cyberattacks. This trend is exacerbated by the proliferation of poorly designed Internet of Things (IoT) devices and cloud services, which often lack appropriate security measures, either due to bugs or configuration mistakes. In this article, we propose, validate, and critically evaluate a flexible honeypot system based on the Hypertext Transfer Protocol (HTTP) that can mimic any HTTP-based service and application. This covers a large share of IoT devices, including black box devices with no software or firmware available for emulation, as well as cloud- and web-based services. We validate the system by implementing 14 services and by running a 4-month experiment, collecting data from attackers. We propose a novel data enrichment mechanism for identifying internet scanning services, as well as several other data collection and enrichment approaches. Finally, we present some results and visualizations of the data collection experiment, demonstrating possible applications and future use cases, as well as potential drawbacks of such systems.

ANALYSIS OF TCP FLOOD ATTACK USING NETFLOW

Traffic analysis is a common question for most of the production systems in various segments of computer networks. Attacks, configuration mistakes, and other factors can cause network increased accessibility and as a result danger for data privacy. Analyzing network flow and their single packets can be helpful for anomalies detection. Well-known network equipment has predeveloped network flow monitoring software. “NetFlow” data collector software “Nfsen” is an open-source way to collect information from agents. Also “Nfsen” is designed for data sorting and dataset for instruction detection system preparation. Prepared data can be split into fragments for artificial intelligent learning and testing. As AI unit can be used multilayer perceptron developed in a python programming language. This paper focused on real-world traffic dataset collection and multilayer perceptron deployment for TCP flood traffic detection.

CAD and 3d-printing integration experience in the curriculum of engineers education

The paper examines the results of using the 3d-printing educational methodology for training the students in the spacecraft-configuration developing area. The first purpose of the considered methodology practice is to implement the rapid-prototyping skills into the educational process, to provide perfection of the student knowledge in configuring the internal on-board equipment of the spacecraft. The second purpose – is to habituate the students to the main principles of the available CAM technologies, to fill the available educational gap in the area of information support of the spacecraft life-cycle. The proposed curriculum includes six training exercises based on a special “Engineering drawing” course unit. The training exercises require using the SolidWorks geometric-simulation software. The preliminary obtained virtual prototypes of the spacecraft configuration elements are subjected to 3d-printing and assembled into a physical configuration model. The physical configuration models are obtained using one of the most accessible rapid-prototyping technologies – 3d-printing of extrusion type. Practicing in 3d-printing provides developing the student skills in managing all other digital-program control devices. The specified first experience of integrating the computer geometricsimulation methodology and the 3d-printing practices in a single course unit has proved: developing the physical-configuration models heightens the student interest to the configuration training. A ready-made physical model does not excuse the available configuration mistakes unlike a virtual model where the component interferences may remain undetected. So, developing a physical model requires additional endeavor and responsibility. Developing a project in a team has proved to be an effective means for solving a common creative problem. The first test of the proposed methodology has shown the importance of perfect adjustment of the available 3d-printing process and the Slicer program. The part-model manufacture cycle requires approximately from 2 to 3 hours per a component (from 1 to 1.5 hours for 3d-printing in that account). Large-scale blocks shall represent an assembly (containing a block body and a lid) to reduce the printing-plastic consumption. Average printing-plastic consumption is about 1 kg per a configuration model. The obtained 3d-printing experience shows that the printing speed is much more important than the printing accuracy for the given educational problem. The obtained educational-methodology test results are considered to be a success. It is recommended to purchase an additional high-productivity 3d-printer facility providing an effective fascinating spacecraftconfiguration process.

Online testing of federated and heterogeneous distributed systems

DiCE is a system for online testing of federated and heterogeneous distributed systems. We have built a prototype of DiCE and integrated it with an open-source BGP router. DiCE quickly detects three important classes of faults, resulting from configuration mistakes, policy conflicts and programming errors. The goal of this demo is to showcase our DiCE prototype while it executes an experiment that involves exploring BGP system behavior in a topology with 27 BGP routers and Internet-like conditions (Figure 1).

Practical verification techniques for wide-area routing

Protocol and system designers use verification techniques to analyze a system's correctness properties. Network operators need verification techniques to ensure the "correct" operation of BGP. BGP's distributed dependencies cause small configuration mistakes or oversights to spur complex errors, which sometimes have devastating effects on global connectivity. These errors are often difficult to debug because they are sometimes only exposed by a specific message arrival pattern or failure scenario.This paper presents an approach to BGP verification that is primarily based on static analysis of router configuration. We argue that: (1) because BGP's a configuration affects its fundamental behavior, verification is a program analysis problem, (2) BGP's complex, dynamic interactions are difficult to abstract and impossible to enumerate, which precludes existing verification techniques, (3) because of BGP's flexible, policy-based configuration, some aspects of BGP configuration must be checked against a higher-level specification of intended policy, and (4) although static analysis can catch many configuration errors, simulation and emulation are also necessary to determine the precise scenarios that could expose errors at runtime. Based on these observations, we propose the design of a BGP verification tool, discuss how it could be applied in practice, and describe future research challenges.

IP network configuration for intradomain traffic engineering

The smooth operation of the Internet depends on the careful configuration of routers in thousands of autonomous systems throughout the world. Configuring routers is extremely complicated because of the diversity of network equipment, the large number of configuration options, and the interaction of configuration parameters across multiple routers. Network operators have limited tools to aid in configuring large backbone networks. Manual configuration of individual routers can introduce errors and inconsistencies with unforeseen consequences for the operational network. In this article we describe how to identify configuration mistakes by parsing and analyzing configuration data extracted from the various routers. We first present an overview of IP networking from the viewpoint of an Internet service provider and describe the kinds of errors that can appear within and across router configuration files. To narrow the scope of the problem, we then focus our attention on the configuration commands that relate to traffic engineering-tuning the intradomain routing protocol to control the flow of traffic through the ISP network. We present a case study of a prototype tool, developed in collaboration with AT&T IP Services, for checking the configuration of the AT&T IP Backbone and providing input to other systems visualization and traffic engineering.