Open-MS (Open-Management System) Ethan Hann

What will be presented? “The Benefits and Limitations of Implementing Computer Management Systems Using Web Technologies” Research Paper Open-MS Project

What is a Computer Management System? A client-server software system used by an IT department, typically, to manage client computers. What do they manage? – Antivirus – Encryption – Hardware and Software Auditing

Computer Management System Examples Symantec Endpoint Protection Manager – Antivirus and Network Security GuardianEdge Hard Disk Encryption – Whole Disk Encryption Open-AudIT – Hardware and Software Auditing

Typical CMS Architecture (That uses the web) Client Antivirus/Encryption/Whatever Usually Implemented as a Service or Daemon Web Server Web Service Administration Client Database Server Database Describes the state of the client. Policies and settings that should be applied to the client.

Why use the Web? Web servers are… – Secure – Reliable – Scale Well Load Balancing Devices + Additional Servers = Even Better Reliability and Scalability All the nuts and bolts are already put together for you.

My Project… Open-MS!

Open-AudIT Architecture Client A VBScript file that posts client data to the server. Some of this data is sensitive. Web Server Web Forms (No Authentication!) Database Server Database

My Project: Open-MS Client Windows Service Built Using C#.NET and WCF Communicates over HTTP Web Server Web Service Built Using C#.NET and WCF Hosted in IIS 7 Database Server Database Using MS SQL Server

Why Not “Open-AudIT Client?” Because that would be too easy! Open-MS – Uses a plug-in architecture to add additional functionality. – A plug-in will be created for Open-AudIT. – Open-MS client wraps the Open-AudIT VBScript.

But still, why not just make an Open-AudIT client?

The Real Beauty: Unmanaged to Managed! Open-MS TrueCryptSpider Moon Secure AV

Open-MS: Admin Interface

Questions?