diff --git a/doc/presentation_review2/img/Ausblick.jpg b/doc/presentation_review2/img/Ausblick.jpg
new file mode 100644
index 0000000..9e56193
Binary files /dev/null and b/doc/presentation_review2/img/Ausblick.jpg differ
diff --git a/doc/presentation_review2/img/Netzwerkplan-Real.png b/doc/presentation_review2/img/Netzwerkplan-Real.png
new file mode 100644
index 0000000..f7c1dee
Binary files /dev/null and b/doc/presentation_review2/img/Netzwerkplan-Real.png differ
diff --git a/doc/presentation_review2/img/SYN-FIN.png b/doc/presentation_review2/img/SYN-FIN.png
new file mode 100644
index 0000000..459c0c6
Binary files /dev/null and b/doc/presentation_review2/img/SYN-FIN.png differ
diff --git a/doc/presentation_review2/img/SYN-Flood-Abwehr.png b/doc/presentation_review2/img/SYN-Flood-Abwehr.png
new file mode 100644
index 0000000..aad16f3
Binary files /dev/null and b/doc/presentation_review2/img/SYN-Flood-Abwehr.png differ
diff --git a/doc/presentation_review2/img/SYN-Flood.png b/doc/presentation_review2/img/SYN-Flood.png
new file mode 100644
index 0000000..a8aed79
Binary files /dev/null and b/doc/presentation_review2/img/SYN-Flood.png differ
diff --git a/doc/presentation_review2/img/SingletonKlasse.png b/doc/presentation_review2/img/SingletonKlasse.png
new file mode 100644
index 0000000..54a1d8a
Binary files /dev/null and b/doc/presentation_review2/img/SingletonKlasse.png differ
diff --git a/doc/presentation_review2/img/Splicing.pdf b/doc/presentation_review2/img/Splicing.pdf
new file mode 100644
index 0000000..43d2818
Binary files /dev/null and b/doc/presentation_review2/img/Splicing.pdf differ
diff --git a/doc/presentation_review2/img/Treatment2.pdf b/doc/presentation_review2/img/Treatment2.pdf
new file mode 100644
index 0000000..353f1bf
Binary files /dev/null and b/doc/presentation_review2/img/Treatment2.pdf differ
diff --git a/doc/presentation_review2/img/Treatment_ohne_Container.pdf b/doc/presentation_review2/img/Treatment_ohne_Container.pdf
new file mode 100644
index 0000000..272e1d1
Binary files /dev/null and b/doc/presentation_review2/img/Treatment_ohne_Container.pdf differ
diff --git a/doc/presentation_review2/img/Treatment_ohne_Container_mit_Schatten.pdf b/doc/presentation_review2/img/Treatment_ohne_Container_mit_Schatten.pdf
new file mode 100644
index 0000000..92cf152
Binary files /dev/null and b/doc/presentation_review2/img/Treatment_ohne_Container_mit_Schatten.pdf differ
diff --git a/doc/presentation_review2/img/aegis_logo_with_name.pdf b/doc/presentation_review2/img/aegis_logo_with_name.pdf
new file mode 100644
index 0000000..0b98f7a
Binary files /dev/null and b/doc/presentation_review2/img/aegis_logo_with_name.pdf differ
diff --git a/doc/presentation_review2/img/analyzerDiagram.png b/doc/presentation_review2/img/analyzerDiagram.png
new file mode 100644
index 0000000..e52be5d
Binary files /dev/null and b/doc/presentation_review2/img/analyzerDiagram.png differ
diff --git a/doc/presentation_review2/img/aufgabe.png b/doc/presentation_review2/img/aufgabe.png
new file mode 100644
index 0000000..4bc9115
Binary files /dev/null and b/doc/presentation_review2/img/aufgabe.png differ
diff --git a/doc/presentation_review2/img/check_typ_syn_cookie.pdf b/doc/presentation_review2/img/check_typ_syn_cookie.pdf
new file mode 100644
index 0000000..86fdb20
Binary files /dev/null and b/doc/presentation_review2/img/check_typ_syn_cookie.pdf differ
diff --git a/doc/presentation_review2/img/class-inspection.jpg b/doc/presentation_review2/img/class-inspection.jpg
new file mode 100644
index 0000000..2bc0c1b
Binary files /dev/null and b/doc/presentation_review2/img/class-inspection.jpg differ
diff --git a/doc/presentation_review2/img/classdia_treatment.pdf b/doc/presentation_review2/img/classdia_treatment.pdf
new file mode 100644
index 0000000..fae7833
Binary files /dev/null and b/doc/presentation_review2/img/classdia_treatment.pdf differ
diff --git a/doc/presentation_review2/img/done/done1.png b/doc/presentation_review2/img/done/done1.png
new file mode 100644
index 0000000..b549180
Binary files /dev/null and b/doc/presentation_review2/img/done/done1.png differ
diff --git a/doc/presentation_review2/img/done/done2.svg b/doc/presentation_review2/img/done/done2.svg
new file mode 100644
index 0000000..9c19cbe
--- /dev/null
+++ b/doc/presentation_review2/img/done/done2.svg
@@ -0,0 +1,467 @@
+
+
diff --git a/doc/presentation_review2/img/done/done3.png b/doc/presentation_review2/img/done/done3.png
new file mode 100644
index 0000000..4fd10c7
Binary files /dev/null and b/doc/presentation_review2/img/done/done3.png differ
diff --git a/doc/presentation_review2/img/done/done4.png b/doc/presentation_review2/img/done/done4.png
new file mode 100644
index 0000000..7a4c494
Binary files /dev/null and b/doc/presentation_review2/img/done/done4.png differ
diff --git a/doc/presentation_review2/img/done/done5.png b/doc/presentation_review2/img/done/done5.png
new file mode 100644
index 0000000..4a8a047
Binary files /dev/null and b/doc/presentation_review2/img/done/done5.png differ
diff --git a/doc/presentation_review2/img/dpdk_logo.png b/doc/presentation_review2/img/dpdk_logo.png
new file mode 100644
index 0000000..8c2e35d
Binary files /dev/null and b/doc/presentation_review2/img/dpdk_logo.png differ
diff --git a/doc/presentation_review2/img/grobentwurf/packet_Diagram_old.png b/doc/presentation_review2/img/grobentwurf/packet_Diagram_old.png
new file mode 100644
index 0000000..250c27d
Binary files /dev/null and b/doc/presentation_review2/img/grobentwurf/packet_Diagram_old.png differ
diff --git a/doc/presentation_review2/img/grobentwurf/packet_diagram.png b/doc/presentation_review2/img/grobentwurf/packet_diagram.png
new file mode 100644
index 0000000..fed928f
Binary files /dev/null and b/doc/presentation_review2/img/grobentwurf/packet_diagram.png differ
diff --git a/doc/presentation_review2/img/grobentwurf/packet_diagram_pipeline.png b/doc/presentation_review2/img/grobentwurf/packet_diagram_pipeline.png
new file mode 100644
index 0000000..91fb7df
Binary files /dev/null and b/doc/presentation_review2/img/grobentwurf/packet_diagram_pipeline.png differ
diff --git a/doc/presentation_review2/img/hash-funktion.png b/doc/presentation_review2/img/hash-funktion.png
new file mode 100644
index 0000000..c9d439a
Binary files /dev/null and b/doc/presentation_review2/img/hash-funktion.png differ
diff --git a/doc/presentation_review2/img/inspection.pdf b/doc/presentation_review2/img/inspection.pdf
new file mode 100644
index 0000000..c05bc14
Binary files /dev/null and b/doc/presentation_review2/img/inspection.pdf differ
diff --git a/doc/presentation_review2/img/mbuf1.png b/doc/presentation_review2/img/mbuf1.png
new file mode 100644
index 0000000..a6dab33
Binary files /dev/null and b/doc/presentation_review2/img/mbuf1.png differ
diff --git a/doc/presentation_review2/img/multithreading.pdf b/doc/presentation_review2/img/multithreading.pdf
new file mode 100644
index 0000000..d140180
Binary files /dev/null and b/doc/presentation_review2/img/multithreading.pdf differ
diff --git a/doc/presentation_review2/img/multithreading2.pdf b/doc/presentation_review2/img/multithreading2.pdf
new file mode 100644
index 0000000..29ac10d
Binary files /dev/null and b/doc/presentation_review2/img/multithreading2.pdf differ
diff --git a/doc/presentation_review2/img/multithreading_old.pdf b/doc/presentation_review2/img/multithreading_old.pdf
new file mode 100644
index 0000000..f644d5d
Binary files /dev/null and b/doc/presentation_review2/img/multithreading_old.pdf differ
diff --git a/doc/presentation_review2/img/multithreding_old.svg b/doc/presentation_review2/img/multithreding_old.svg
new file mode 100644
index 0000000..ca83cbb
--- /dev/null
+++ b/doc/presentation_review2/img/multithreding_old.svg
@@ -0,0 +1,895 @@
+
+
+
+
+
+ image/svg+xml
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ PacketDissection
+
+
+
+
+
+
+
+
+
+
+ PacketDissection
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ T1
+
+
+
+
+
+
+
+
+
+
+
+ T1
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Inspection
+
+
+
+
+
+
+
+
+ Inspection
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ T2
+
+
+
+
+
+
+
+
+
+
+
+ T2
+
+
+
+
+
+
+
+
+
+
+ Treatment
+
+
+
+
+
+
+
+
+ Treatment
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ T3
+
+
+
+
+
+
+
+
+
+
+
+ T3
+
+
+
+
+
+
+
+
+
+
+ NicManagement
+
+
+
+
+
+
+
+
+ NicManagement
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ T0
+
+
+
+
+
+
+
+
+
+
+
+ T0
+
+
+
+
+
+
+
+
+
+
+
+
+ NIC
+
+
+
+
+
+
+
+
+
+
+ NIC
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/doc/presentation_review2/img/multitreading.svg b/doc/presentation_review2/img/multitreading.svg
new file mode 100644
index 0000000..1f2d23c
--- /dev/null
+++ b/doc/presentation_review2/img/multitreading.svg
@@ -0,0 +1,791 @@
+
+
+
+
+
+ image/svg+xml
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ NicManagement
+
+
+
+
+
+
+
+
+
+ NicManagement
+
+
+
+
+
+
+
+
+
+
+
+ PacketDissection
+
+
+
+
+
+
+
+
+ PacketDissection
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Treatment
+
+
+
+
+
+
+
+
+
+
+ Treatment
+
+
+
+
+
+
+
+
+
+
+
+
+ Inspection
+
+
+
+
+
+
+
+
+
+ Inspection
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ T1
+
+
+
+
+
+
+
+
+
+
+
+ T1
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ T0
+
+
+
+
+
+
+
+
+
+
+
+ T0
+
+
+
+
+
+
+
+
+
+
+
+
+
+ T1
+
+0
+
+
+
+
+
+
+
+
+
+
+ T1
+
+
+ T10
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/doc/presentation_review2/img/multitreading2.svg b/doc/presentation_review2/img/multitreading2.svg
new file mode 100644
index 0000000..3f2a480
--- /dev/null
+++ b/doc/presentation_review2/img/multitreading2.svg
@@ -0,0 +1,866 @@
+
+
+
+
+
+ image/svg+xml
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ NicManagement
+
+
+
+
+
+
+
+
+
+ NicManagement
+
+
+
+
+
+
+
+
+
+
+
+ PacketDissection
+
+
+
+
+
+
+
+
+ PacketDissection
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Treatment
+
+
+
+
+
+
+
+
+
+
+ Treatment
+
+
+
+
+
+
+
+
+
+
+
+
+ Inspection
+
+
+
+
+
+
+
+
+
+ Inspection
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ T1
+
+
+
+
+
+
+
+
+
+
+
+ T1
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ T0
+
+
+
+
+
+
+
+
+
+
+
+ T0
+
+
+
+
+
+
+
+
+
+
+
+
+
+ T1
+
+0
+
+
+
+
+
+
+
+
+
+
+ T1
+
+
+ T10
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ NIC
+
+
+
+
+
+
+
+
+
+
+ NIC
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/doc/presentation_review2/img/polling.png b/doc/presentation_review2/img/polling.png
new file mode 100644
index 0000000..9b37d40
Binary files /dev/null and b/doc/presentation_review2/img/polling.png differ
diff --git a/doc/presentation_review2/img/roadmap/roadmap2.svg b/doc/presentation_review2/img/roadmap/roadmap2.svg
new file mode 100644
index 0000000..53bab98
--- /dev/null
+++ b/doc/presentation_review2/img/roadmap/roadmap2.svg
@@ -0,0 +1,592 @@
+
+
+
+
+
+ image/svg+xml
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ PacketDissection
+
+
+
+
+
+
+
+
+
+
+ PacketDissection
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Inspection
+
+
+
+
+
+
+
+
+ Inspection
+
+
+
+
+
+
+
+
+
+
+ Treatment
+
+
+
+
+
+
+
+
+ Treatment
+
+
+
+
+
+
+
+
+
+
+ NicManagement
+
+
+
+
+
+
+
+
+ NicManagement
+
+
+
+
+
+
+
+
+
+
+
+
+ NIC
+
+
+
+
+
+
+
+
+
+
+ NIC
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/doc/presentation_review2/img/roadmap/roadmap2_1.svg b/doc/presentation_review2/img/roadmap/roadmap2_1.svg
new file mode 100644
index 0000000..bd1c5f8
--- /dev/null
+++ b/doc/presentation_review2/img/roadmap/roadmap2_1.svg
@@ -0,0 +1,601 @@
+
+
+
+
+
+ image/svg+xml
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ PacketDissection
+
+
+
+
+
+
+
+
+
+
+ PacketDissection
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Inspection
+
+
+
+
+
+
+
+
+ Inspection
+
+
+
+
+
+
+
+
+
+
+ Treatment
+
+
+
+
+
+
+
+
+ Treatment
+
+
+
+
+
+
+
+
+
+
+ NicManagement
+
+
+
+
+
+
+
+
+ NicManagement
+
+
+
+
+
+
+
+
+
+
+
+
+ NIC
+
+
+
+
+
+
+
+
+
+
+ NIC
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/doc/presentation_review2/img/roadmap/roadmap2_2.svg b/doc/presentation_review2/img/roadmap/roadmap2_2.svg
new file mode 100644
index 0000000..271d8bf
--- /dev/null
+++ b/doc/presentation_review2/img/roadmap/roadmap2_2.svg
@@ -0,0 +1,601 @@
+
+
+
+
+
+ image/svg+xml
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ PacketDissection
+
+
+
+
+
+
+
+
+
+
+ PacketDissection
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Inspection
+
+
+
+
+
+
+
+
+ Inspection
+
+
+
+
+
+
+
+
+
+
+ Treatment
+
+
+
+
+
+
+
+
+ Treatment
+
+
+
+
+
+
+
+
+
+
+ NicManagement
+
+
+
+
+
+
+
+
+ NicManagement
+
+
+
+
+
+
+
+
+
+
+
+
+ NIC
+
+
+
+
+
+
+
+
+
+
+ NIC
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/doc/presentation_review2/img/roadmap/roadmap2_3.svg b/doc/presentation_review2/img/roadmap/roadmap2_3.svg
new file mode 100644
index 0000000..c5dcaa7
--- /dev/null
+++ b/doc/presentation_review2/img/roadmap/roadmap2_3.svg
@@ -0,0 +1,601 @@
+
+
+
+
+
+ image/svg+xml
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ PacketDissection
+
+
+
+
+
+
+
+
+
+
+ PacketDissection
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Inspection
+
+
+
+
+
+
+
+
+ Inspection
+
+
+
+
+
+
+
+
+
+
+ Treatment
+
+
+
+
+
+
+
+
+ Treatment
+
+
+
+
+
+
+
+
+
+
+ NicManagement
+
+
+
+
+
+
+
+
+ NicManagement
+
+
+
+
+
+
+
+
+
+
+
+
+ NIC
+
+
+
+
+
+
+
+
+
+
+ NIC
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/doc/presentation_review2/img/roadmap/roadmap2_4.svg b/doc/presentation_review2/img/roadmap/roadmap2_4.svg
new file mode 100644
index 0000000..72b63d0
--- /dev/null
+++ b/doc/presentation_review2/img/roadmap/roadmap2_4.svg
@@ -0,0 +1,601 @@
+
+
+
+
+
+ image/svg+xml
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ PacketDissection
+
+
+
+
+
+
+
+
+
+
+ PacketDissection
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Inspection
+
+
+
+
+
+
+
+
+ Inspection
+
+
+
+
+
+
+
+
+
+
+ Treatment
+
+
+
+
+
+
+
+
+ Treatment
+
+
+
+
+
+
+
+
+
+
+ NicManagement
+
+
+
+
+
+
+
+
+ NicManagement
+
+
+
+
+
+
+
+
+
+
+
+
+ NIC
+
+
+
+
+
+
+
+
+
+
+ NIC
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/doc/presentation_review2/img/rss/rss.svg b/doc/presentation_review2/img/rss/rss.svg
new file mode 100644
index 0000000..d0f158f
--- /dev/null
+++ b/doc/presentation_review2/img/rss/rss.svg
@@ -0,0 +1,1254 @@
+
+
+
+
+
+ image/svg+xml
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Middle-Box
+
+
+
+
+
+
+
+
+ Middle-Box
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ T0
+
+
+
+
+
+
+
+
+
+
+
+ T0
+
+
+
+
+
+
+
+
+
+
+
+
+
+ T1
+
+
+
+
+
+
+
+
+
+
+
+ T1
+
+
+
+
+
+
+
+
+
+
+ Port
+
+
+
+
+
+
+
+
+ Port
+
+
+
+
+
+
+
+
+
+
+
+
+ Queue
+
+
+
+
+
+
+
+
+ Queue
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ T1
+
+
+0
+
+
+
+
+
+
+
+
+
+
+ T1
+
+
+ T10
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/doc/presentation_review2/img/rss/sym_rss_problem.svg b/doc/presentation_review2/img/rss/sym_rss_problem.svg
new file mode 100644
index 0000000..50817b8
--- /dev/null
+++ b/doc/presentation_review2/img/rss/sym_rss_problem.svg
@@ -0,0 +1,1242 @@
+
+
+
+
+
+ image/svg+xml
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Middle-Box
+
+
+
+
+
+
+
+
+ Middle-Box
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ T0
+
+
+
+
+
+
+
+
+
+
+
+ T0
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ T1
+
+
+
+
+
+
+
+
+
+
+
+ T1
+
+
+
+
+
+
+
+
+
+
+ Port 0
+
+
+
+
+
+
+
+
+ Port 0
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ T1
+
+0
+
+
+
+
+
+
+
+
+
+
+ T1
+
+
+ T10
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Port 1
+
+
+
+
+
+
+
+
+ Port 1
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/doc/presentation_review2/img/rss/sym_rss_solution.svg b/doc/presentation_review2/img/rss/sym_rss_solution.svg
new file mode 100644
index 0000000..7a62ce0
--- /dev/null
+++ b/doc/presentation_review2/img/rss/sym_rss_solution.svg
@@ -0,0 +1,1241 @@
+
+
+
+
+
+ image/svg+xml
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Middle-Box
+
+
+
+
+
+
+
+
+ Middle-Box
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ T0
+
+
+
+
+
+
+
+
+
+
+
+ T0
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ T1
+
+
+
+
+
+
+
+
+
+
+
+ T1
+
+
+
+
+
+
+
+
+
+
+ Port 0
+
+
+
+
+
+
+
+
+ Port 0
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ T1
+
+0
+
+
+
+
+
+
+
+
+
+
+ T1
+
+
+ T10
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Port 1
+
+
+
+
+
+
+
+
+ Port 1
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/doc/presentation_review2/img/singleton.pdf b/doc/presentation_review2/img/singleton.pdf
new file mode 100644
index 0000000..4682773
Binary files /dev/null and b/doc/presentation_review2/img/singleton.pdf differ
diff --git a/doc/presentation_review2/img/singleton.png b/doc/presentation_review2/img/singleton.png
new file mode 100644
index 0000000..445b089
Binary files /dev/null and b/doc/presentation_review2/img/singleton.png differ
diff --git a/doc/presentation_review2/img/splicing.pdf b/doc/presentation_review2/img/splicing.pdf
new file mode 100644
index 0000000..43d2818
Binary files /dev/null and b/doc/presentation_review2/img/splicing.pdf differ
diff --git a/doc/presentation_review2/img/syn-paket.png b/doc/presentation_review2/img/syn-paket.png
new file mode 100644
index 0000000..cd38832
Binary files /dev/null and b/doc/presentation_review2/img/syn-paket.png differ
diff --git a/doc/presentation_review2/presentation2.pdf b/doc/presentation_review2/presentation2.pdf
new file mode 100644
index 0000000..03fe1bb
Binary files /dev/null and b/doc/presentation_review2/presentation2.pdf differ
diff --git a/doc/presentation_review2/presentation2.tex b/doc/presentation_review2/presentation2.tex
new file mode 100644
index 0000000..37468d4
--- /dev/null
+++ b/doc/presentation_review2/presentation2.tex
@@ -0,0 +1,347 @@
+\documentclass{beamer}
+\usepackage[T1]{fontenc}
+\usepackage[utf8]{inputenc}
+\usepackage[german]{babel}
+\usepackage{pdfpages}
+\usepackage{amssymb}
+\usepackage{enumerate}
+\usepackage{array}
+\usepackage{lmodern}
+\usepackage{url}
+\usepackage{hyperref}
+\usepackage[all]{xy}
+\usepackage[export]{adjustbox}
+\usepackage{subcaption}
+\usepackage{listings}
+\usepackage{graphicx}
+\graphicspath{{./img/}}
+
+%Farbschema
+\definecolor{tuerkis}{rgb}{0.0, 0.65, 0.76}
+\definecolor{weiss}{rgb}{1.0,1.0,1.0}
+\definecolor{gruen}{rgb}{0.22, 0.74, 0.07}
+
+\usetheme{metropolis}
+%\usecolortheme{whale}
+\setbeamercolor{progress bar}{fg=gruen,bg=gruen}
+\setbeamercolor{frametitle}{bg = gruen}
+\setbeamercolor{background canvas}{bg = weiss}
+\setbeamercolor{footline}{fg=gray}
+\setbeamerfont{page number in head/foot}{size=\scriptsize}
+\setbeamercolor{title}{fg = black}
+\setbeamertemplate{frame footer}{ \insertlogo{\includegraphics[width=0.1\textwidth]{aegis_logo_with_name.pdf}} \hfill \insertsection}
+\lstset{frame=single}
+
+%\logo{\includegraphics[width=.1\textwidth]{aegis_logo_with_name.pdf}\hspace*{.05\paperwidth}}
+%\logo{\includegraphics[width=.1\textwidth]{img/aegis_logo_with_name.pdf}}
+\newcommand\pipeline{\center \includegraphics[width=0.6\linewidth]{grobentwurf/packet_diagram_pipeline.png}}
+
+%Information to be included in the title page:
+\title[Abwehr von Denial-of-Service-Angriffen durch effiziente User-Space Paketverarbeitung: AEGIS]{Abwehr von Denial-of-Service-Angriffen durch effiziente User-Space Paketverarbeitung: AEGIS}
+\subtitle{Review für die Implementierungsphase}
+\institute{Technische Universität Ilmenau}
+\date{24.06.2021}
+
+\begin{document}
+
+\begin{frame}
+ \maketitle % Automatically created using the information in the commands above
+\end{frame}
+
+\begin{frame}{Aufgabenstellung}
+ \center
+ \includegraphics[width=0.3\textwidth]{dpdk_logo.png}
+ \includegraphics[width=\textwidth]{Netzwerkplan-Real.png}
+ \center
+ Abwehrsystem gegen DoS-Angriffe
+\end{frame}
+
+\begin{frame}{Aufgabenstellung}
+ \begin{itemize}
+ \item Die Software soll mehrere Varianten von Attacken abwehren
+ \item Nur eine davon ist für diesen Vortrag relevant:
+ \end{itemize}
+ \center
+ \textbf{SYN-Flood-Attacke}
+ \begin{figure}[h!]
+ \includegraphics[width=0.5\textwidth]{SYN-FLOOD.png}
+ \end{figure}
+\end{frame}
+
+\begin{frame}{Gliederung}
+ \begin{enumerate}
+ \item \textbf{Grobentwurf}
+ \item \textbf{Feinentwurf}
+ \begin{enumerate}
+ \item Komponente: NicManagement
+ \item Komponente: PacketDissection
+ \item Komponente: Inspection
+ \item Komponente: Treatment
+ \item Einsatz von mehreren Threads
+ \item Alternative Entwürfe
+ \end{enumerate}
+ \item \textbf{Entwurfsmuster}
+ \item \textbf{Stand des Projekts}
+ \item \textbf{Ausblick}
+ \end{enumerate}
+\end{frame}
+
+% ===== G R O B E N T W U R F ===== %
+\begin{frame}{Grobentwurf}
+ \begin{center}
+ %\includegraphics[width=\linewidth]{grobentwurf/packet_diagram.pdf}
+ \end{center}
+\end{frame}
+
+\begin{frame}{Grobentwurf}
+ \begin{center}
+ %\includegraphics[width=0.95\linewidth]{roadmap/roadmap2.pdf}
+ Die Architektur folgt dem Pipeline-Modell.
+ \end{center}
+\end{frame}
+
+% ===== F E I N E N T W U R F ===== %
+\begin{frame}{Feinentwurf}
+ %\includegraphics[width=\textwidth]{roadmap/roadmap2_1.pdf}
+\end{frame}
+
+\begin{frame}{Feinentwurf: NicManagement}
+ \begin{figure}
+ \includegraphics[width=0.3\textwidth]{dpdk_logo.png}
+ \includegraphics[width=\linewidth]{polling.png}
+ \center
+ effizient Pakete von der NIC bekommen: Polling
+ \end{figure}
+\end{frame}
+
+\begin{frame}{Feinentwurf: PacketDissection}
+ %\includegraphics[width=\textwidth]{roadmap/roadmap2_2.pdf}
+\end{frame}
+
+\begin{frame}{Feinentwurf: PacketDissection}
+ %\includegraphics[width=\textwidth]{roadmap/roadmap2_2.pdf}
+ \begin{itemize}
+ \item extrahiert Informationen aus den Paketen
+ \item stellt diese für die folgenden Komponenten bereit
+ \end{itemize}
+\end{frame}
+
+\begin{frame}{Feinentwurf: Inspection}
+ %\includegraphics[width=\textwidth]{roadmap/roadmap2_3.pdf}
+\end{frame}
+
+\begin{frame}{Feinentwurf: Inspection}
+ \begin{minipage}[h]{0.45\textwidth}
+ \begin{figure}[h!]
+ \includegraphics[width=\textwidth, center]{inspection.pdf}
+ \end{figure}
+ \end{minipage}
+ \hfill
+ \begin{minipage}[h]{0.45\textwidth}
+ \begin{itemize}
+ \item Klasse Analyzer
+ \item Filterung aller Pakete der Netzwerkprotokolle UDP, TCP, ICMP
+ \item Abwehr von SYN-FIN-Angriffen
+ \end{itemize}
+ \end{minipage}
+\end{frame}
+
+\begin{frame}{Feinentwurf: Inspection}
+ \includegraphics[width=\textwidth, center]{analyzerDiagram.png}
+\end{frame}
+
+\begin{frame}{Feinentwurf: Treatment}
+ %\includegraphics[width=\textwidth]{roadmap/roadmap2_4.pdf}
+\end{frame}
+
+\begin{frame}{Feinentwurf: Treatment}
+ \includegraphics[width=\textwidth, center]{Treatment_ohne_Container_mit_Schatten.pdf}
+\end{frame}
+
+\begin{frame}{Feinentwurf: Treatment}
+ \begin{minipage}[h]{0.45\textwidth}
+ \includegraphics[width=\textwidth, center]{SYN-FLOOD.png}
+ \end{minipage}
+ \hfill
+ \begin{minipage}[h]{0.45\textwidth}
+ \begin{itemize}
+ \item SYN-Flood-Abwehr mit SYN-Cookies
+ \item keine Reservierung von Ressourcen beim Aufbau
+ \end{itemize}
+ \end{minipage}
+\end{frame}
+
+\begin{frame}{Feinentwurf: Treatment}
+ \begin{minipage}[h]{0.5\textwidth}
+ \includegraphics[width=\textwidth, center]{splicing.pdf}
+ \end{minipage}
+ \hfill
+ \begin{minipage}[h]{0.45\textwidth}
+ \begin{itemize}
+ \item TCP-Proxy
+ \item Middle-Box als Vermittler
+ \end{itemize}
+ \end{minipage}
+\end{frame}
+
+\begin{frame}[fragile]
+ \frametitle{Implementierung Treatment}
+ {\footnotesize
+ \begin{lstlisting}
+Treatment::treat_packtes(){
+ for packet in packet_to_inside{
+ if(packet.get_type() == packet_type_tcp){
+ flags = packet.get_flags();
+ if(flags.is_pure_syn()){
+ syn_cookie = calc_cookie(connection_data);
+ reply_packet = get_empty_packet_to_outside;
+ reply_packet.fill(connection_data,syn_cookie);
+ }
+ else if(...){...}
+ ...
+ }
+ }
+}
+ \end{lstlisting}
+ }
+\end{frame}
+
+\begin{frame}{Feinentwurf: Einsatz von Threads}
+ \begin{itemize}
+ \item eine Pipeline \(\rightarrow\) nur ein Thread nötig
+ \end{itemize}
+ %\includegraphics[width=\linewidth]{roadmap/roadmap2.pdf}
+\end{frame}
+
+\begin{frame}{Feinentwurf: Einsatz von Threads}
+ \begin{itemize}
+ \item Wünsche für Effizienz:
+ \begin{itemize}
+ \item mehrere Threads parallel
+ \item gleichmäßig ausgelastet
+ \item keine Kommunikation
+ \end{itemize}
+ \end{itemize}
+ \includegraphics[width=\linewidth]{multithreading2.pdf}
+\end{frame}
+
+\begin{frame}{Feinentwurf: Einsatz von Threads}
+ \begin{itemize}
+ \item Pakete aufgeteilt durch ,,RSS'' (Receive Side Scaling)
+ \begin{itemize}
+ \item realisiert durch Hashing
+ \item Schlüssel: \texttt{[Src-IP; Dst-IP; Src-Port; Dst-Port]}
+ \end{itemize}
+ \end{itemize}
+ \begin{figure}
+ \center
+ %\includegraphics[width=0.8\linewidth]{rss/rss.pdf}
+ \end{figure}
+ \begin{itemize}
+ \item \textbf{gleichmäßige Auslastung} (wegen Hashing)
+ \end{itemize}
+\end{frame}
+
+\begin{frame}{Feinentwurf: Einsatz von Threads}
+ \begin{itemize}
+ \item Problem: Verschiedene Zuordnung je Seite
+ \begin{itemize}
+ \item[\(\rightarrow\)] Inter-Thread-Kommunikation nötig!
+ \end{itemize}
+ \end{itemize}
+ \begin{figure}
+ \center
+ %\includegraphics[width=\linewidth]{rss/sym_rss_solution.pdf}
+ \end{figure}
+\end{frame}
+
+\begin{frame}{Feinentwurf: Einsatz von Threads}
+ \begin{itemize}
+ \item Lösung: ,,Symmetric RSS''
+ \begin{itemize}
+ \item \texttt{[\textbf{Src-IP}; \textit{Dst-IP}]} \(\equiv\) \texttt{[\textit{Dst-IP}; \textbf{Src-IP}]}
+ \item[\(\rightarrow\)] \textbf{keine Inter-Thread-Kommunikation nötig}
+ \end{itemize}
+ \end{itemize}
+ \begin{figure}
+ \center
+ %\includegraphics[width=\linewidth]{rss/sym_rss_problem.pdf}
+ \end{figure}
+\end{frame}
+
+\begin{frame}{Feinentwurf: Alternative Entwürfe}
+ % Alternativen (Implementierungsentscheidungen, Grobentwurfsänderung)
+ \begin{figure}
+ \center
+ \includegraphics[width=\textwidth]{multithreading_old.pdf}
+ \end{figure}
+ \begin{itemize}
+ \item alternativ: ein Thread pro Komponente
+ \item Nachteil: zu viel Inter-Thread-Kommunikation
+ \end{itemize}
+\end{frame}
+
+\begin{frame}{Entwurfsmuster}
+ \begin{minipage}[h]{0.45\textwidth}
+ \begin{figure}[h!]
+ \includegraphics[width=\textwidth]{singleton.pdf}
+ \end{figure}
+ \end{minipage}
+ \hfill
+ \begin{minipage}[h]{0.45\textwidth}
+ \begin{itemize}
+ \item Erzeugungsmuster
+ \item Nur ein Objekt dieser Klasse
+ \item Globale Informationsbereitstellung
+ \item Verwendung im Configurator
+ \end{itemize}
+ \end{minipage}
+\end{frame}
+
+\begin{frame}{Was AEGIS bisher kann}
+ \begin{minipage}[h]{\textwidth}
+ \center
+ \begin{minipage}[h]{0.5\textwidth}
+ \center
+ \includegraphics[width=\textwidth]{done/done1.png}
+ Pakete weiterleiten
+ \end{minipage}
+ \begin{minipage}[h]{0.25\textwidth}
+ \center
+ %\includegraphics[width=\textwidth]{done/done2.pdf}
+ Multithreading
+ \end{minipage}
+ \end{minipage}
+ \vspace{0.5cm}
+ \begin{minipage}[h]{\textwidth}
+ \center
+ \begin{minipage}[h]{0.3\textwidth}
+ \center
+ \includegraphics[width=0.5\textwidth]{done/done3.png}
+ Informationen aus Paketen extrahieren
+ \end{minipage}
+ \end{minipage}
+\end{frame}
+
+\begin{frame}{Ausblick}
+ \begin{itemize}
+ \item Anforderungen unverändert
+ \item Überprüfung wichtiger Anforderung
+ \item Erweiterung um Angriffe und ihre Abwehrmechanismen
+ \end{itemize}
+\end{frame}
+
+\begin{frame}{Bildquellen}
+ \begin{itemize}
+ \tiny
+ \item https://www.onlinewebfonts.com/icon/571002 [Abgerufen am 22.06.2021]
+ \end{itemize}
+\end{frame}
+
+\begin{frame}
+ \begin{center}
+ \textbf{Vielen Dank für Ihre Aufmerksamkeit!}
+ \end{center}
+\end{frame}
+
+\end{document}
\ No newline at end of file