Cristel Pelsser (rapporteur) Tools and testbeds Cristel Pelsser (rapporteur) Stefan Burschka James Sterbenz Aiko Pras Timur Friedman

Overview Desired properties for tools and testbeds Small inventory of tools and testbeds Sharing of resources

Desired properties – technical ease of use, low overhead example planetlab interface (Timur’s MOOC) dealing with user creation? reproducibility sustainability of the testbed (what happens when the funding goes out? offline tools for availability (on trains, ...)

Desired properties – community related How to build a community How to deal with success Sustainability of the testbed (what happens when the funding goes out? Need for low cost maintainance Incentives for institutions to upgrade hardware Making it available for industry (can be a source of revenue)

Repository of tools Capture and analysis Network emulation Experiments on the Internet TCP behavior (Interconnected) testbeds

Capture and analysis Wireshark (https://www.wireshark.org/): for illustrating part of protocols (need correlations on both ends) headers and encapsulation (intro to networking) Understand packet flow congestion control (illustrate congestion avoidance) find attacks ipsec and key negotiation https://www.simpleweb.org/wiki/index.php/Traces opentraces

Capture and analysis bro: for flow based tranalyzer big data traces analysis can be used as IDS packet or flow-based http sniffer plugin

Network emulation gns3 junosphere, olive mininet emulate routers Same as above mininet to do firewalling find out vulnerabilities of systems SDN use vagrant to do the setup (Nick Feamster)

Experiments on the Internet planetlab exposing experimenters to the “real” Internet routing changes geographically dispersed measurement points (eg: anycast) internet measurements: ping, traceroute, iperf. Traceroute from A to B and vice versa. Find symmetric routes, asymmetric routes, … (Timur and Renata) 2 INRIA researchers provided the interface. Iperf to measure available bandwidth, validity of the measurements. Soon available outside the MOOC. for intro to networking: analysis of an http trace (TCP behavior) supports IPv6

Timor’s MOOC interface to planetlab: dashboard

Launch

Results

Experiments on the Internet GENI reservation of resources. Compute and memory. Do SDN like experiments. VINI (GENI with ability to control the topology) GTS: Geant testbed service (Jerry Sobieski) 9 PoPs across Europe where you can get virtualized resources. reserved 10 Gbps links. RIPE atlas: traceroutes, ping: similar uses to planetlab as used in Timur and Renata’s MOOC. SamKnows, Bismarck, archipelago, …

TCP behavior linux modprobe NS3: network simulation. to load different TCP versions and study congestion (look at logs). We have surprises because the implementation in linux differs from what we teach. → ns3 has modules to do that. NS3: network simulation.

(Interconnected) testbeds - wireless NITOS Wireless lab in greece FIT IOT Labs study the range of different wireless technologies study the energy consumption configure sensors, retrieve values from them Illustrate RPL

Interconnected testbeds - Wired Virtual Wall (IMEC) Rack with loads of servers. Create a virtual network. Network emulation at large-scale. Grid 5000 is similar to virtual wall, starbed. ToMaTo: gui (same author as g-lab) Tomato-lab.org or http://dswd.github.io/ToMaTo/ Setting up of virtual topologies JFED: also from IMEC. java federation Servers, links, install on testbed of your choice (FIRE -> federation with common API) Virtual wall is compatible, planetlab and GENI as well.

Need for visualization timeline diagram (chronograph), illustrations for DoS BGPplay Traceroute visualization (Roma Tre -> RIPE) omnigraffle to do the animations, keynote, ppt, … gnuplot , R, S, …

How to share materials What How Pcap files Labs and instructions for different environments Courses VMs How Wiki, github, youtube Different MOOC platforms FUN (France Université Numérique) learnIntSec.org