diff --git a/doc/presentation_review2/img/Ausblick.jpg b/doc/presentation_review2/img/Ausblick.jpg new file mode 100644 index 0000000..9e56193 Binary files /dev/null and b/doc/presentation_review2/img/Ausblick.jpg differ diff --git a/doc/presentation_review2/img/Netzwerkplan-Real.png b/doc/presentation_review2/img/Netzwerkplan-Real.png new file mode 100644 index 0000000..f7c1dee Binary files /dev/null and b/doc/presentation_review2/img/Netzwerkplan-Real.png differ diff --git a/doc/presentation_review2/img/SYN-FIN.png b/doc/presentation_review2/img/SYN-FIN.png new file mode 100644 index 0000000..459c0c6 Binary files /dev/null and b/doc/presentation_review2/img/SYN-FIN.png differ diff --git a/doc/presentation_review2/img/SYN-Flood-Abwehr.png b/doc/presentation_review2/img/SYN-Flood-Abwehr.png new file mode 100644 index 0000000..aad16f3 Binary files /dev/null and b/doc/presentation_review2/img/SYN-Flood-Abwehr.png differ diff --git a/doc/presentation_review2/img/SYN-Flood.png b/doc/presentation_review2/img/SYN-Flood.png new file mode 100644 index 0000000..a8aed79 Binary files /dev/null and b/doc/presentation_review2/img/SYN-Flood.png differ diff --git a/doc/presentation_review2/img/SingletonKlasse.png b/doc/presentation_review2/img/SingletonKlasse.png new file mode 100644 index 0000000..54a1d8a Binary files /dev/null and b/doc/presentation_review2/img/SingletonKlasse.png differ diff --git a/doc/presentation_review2/img/Splicing.pdf b/doc/presentation_review2/img/Splicing.pdf new file mode 100644 index 0000000..43d2818 Binary files /dev/null and b/doc/presentation_review2/img/Splicing.pdf differ diff --git a/doc/presentation_review2/img/Treatment2.pdf b/doc/presentation_review2/img/Treatment2.pdf new file mode 100644 index 0000000..353f1bf Binary files /dev/null and b/doc/presentation_review2/img/Treatment2.pdf differ diff --git a/doc/presentation_review2/img/Treatment_ohne_Container.pdf b/doc/presentation_review2/img/Treatment_ohne_Container.pdf new file mode 100644 index 0000000..272e1d1 Binary files /dev/null and b/doc/presentation_review2/img/Treatment_ohne_Container.pdf differ diff --git a/doc/presentation_review2/img/Treatment_ohne_Container_mit_Schatten.pdf b/doc/presentation_review2/img/Treatment_ohne_Container_mit_Schatten.pdf new file mode 100644 index 0000000..92cf152 Binary files /dev/null and b/doc/presentation_review2/img/Treatment_ohne_Container_mit_Schatten.pdf differ diff --git a/doc/presentation_review2/img/aegis_logo_with_name.pdf b/doc/presentation_review2/img/aegis_logo_with_name.pdf new file mode 100644 index 0000000..0b98f7a Binary files /dev/null and b/doc/presentation_review2/img/aegis_logo_with_name.pdf differ diff --git a/doc/presentation_review2/img/analyzerDiagram.png b/doc/presentation_review2/img/analyzerDiagram.png new file mode 100644 index 0000000..e52be5d Binary files /dev/null and b/doc/presentation_review2/img/analyzerDiagram.png differ diff --git a/doc/presentation_review2/img/aufgabe.png b/doc/presentation_review2/img/aufgabe.png new file mode 100644 index 0000000..4bc9115 Binary files /dev/null and b/doc/presentation_review2/img/aufgabe.png differ diff --git a/doc/presentation_review2/img/check_typ_syn_cookie.pdf b/doc/presentation_review2/img/check_typ_syn_cookie.pdf new file mode 100644 index 0000000..86fdb20 Binary files /dev/null and b/doc/presentation_review2/img/check_typ_syn_cookie.pdf differ diff --git a/doc/presentation_review2/img/class-inspection.jpg b/doc/presentation_review2/img/class-inspection.jpg new file mode 100644 index 0000000..2bc0c1b Binary files /dev/null and b/doc/presentation_review2/img/class-inspection.jpg differ diff --git a/doc/presentation_review2/img/classdia_treatment.pdf b/doc/presentation_review2/img/classdia_treatment.pdf new file mode 100644 index 0000000..fae7833 Binary files /dev/null and b/doc/presentation_review2/img/classdia_treatment.pdf differ diff --git a/doc/presentation_review2/img/done/done1.png b/doc/presentation_review2/img/done/done1.png new file mode 100644 index 0000000..b549180 Binary files /dev/null and b/doc/presentation_review2/img/done/done1.png differ diff --git a/doc/presentation_review2/img/done/done2.svg b/doc/presentation_review2/img/done/done2.svg new file mode 100644 index 0000000..9c19cbe --- /dev/null +++ b/doc/presentation_review2/img/done/done2.svg @@ -0,0 +1,467 @@ + + + + + + image/svg+xml + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + T0 + + + + + + + + + + + T0 + + + + + + + + + + + + + T1 + + + + + + + + + + + T1 + + + + + + + + + + + + + ... + + + + + + + + + + + ... + + + + + + + + + + + + + T10 + + + + + + + + + + + T10 + + + + + + + + + + + + + + diff --git a/doc/presentation_review2/img/done/done3.png b/doc/presentation_review2/img/done/done3.png new file mode 100644 index 0000000..4fd10c7 Binary files /dev/null and b/doc/presentation_review2/img/done/done3.png differ diff --git a/doc/presentation_review2/img/done/done4.png b/doc/presentation_review2/img/done/done4.png new file mode 100644 index 0000000..7a4c494 Binary files /dev/null and b/doc/presentation_review2/img/done/done4.png differ diff --git a/doc/presentation_review2/img/done/done5.png b/doc/presentation_review2/img/done/done5.png new file mode 100644 index 0000000..4a8a047 Binary files /dev/null and b/doc/presentation_review2/img/done/done5.png differ diff --git a/doc/presentation_review2/img/dpdk_logo.png b/doc/presentation_review2/img/dpdk_logo.png new file mode 100644 index 0000000..8c2e35d Binary files /dev/null and b/doc/presentation_review2/img/dpdk_logo.png differ diff --git a/doc/presentation_review2/img/grobentwurf/packet_Diagram_old.png b/doc/presentation_review2/img/grobentwurf/packet_Diagram_old.png new file mode 100644 index 0000000..250c27d Binary files /dev/null and b/doc/presentation_review2/img/grobentwurf/packet_Diagram_old.png differ diff --git a/doc/presentation_review2/img/grobentwurf/packet_diagram.png b/doc/presentation_review2/img/grobentwurf/packet_diagram.png new file mode 100644 index 0000000..fed928f Binary files /dev/null and b/doc/presentation_review2/img/grobentwurf/packet_diagram.png differ diff --git a/doc/presentation_review2/img/grobentwurf/packet_diagram_pipeline.png b/doc/presentation_review2/img/grobentwurf/packet_diagram_pipeline.png new file mode 100644 index 0000000..91fb7df Binary files /dev/null and b/doc/presentation_review2/img/grobentwurf/packet_diagram_pipeline.png differ diff --git a/doc/presentation_review2/img/hash-funktion.png b/doc/presentation_review2/img/hash-funktion.png new file mode 100644 index 0000000..c9d439a Binary files /dev/null and b/doc/presentation_review2/img/hash-funktion.png differ diff --git a/doc/presentation_review2/img/inspection.pdf b/doc/presentation_review2/img/inspection.pdf new file mode 100644 index 0000000..c05bc14 Binary files /dev/null and b/doc/presentation_review2/img/inspection.pdf differ diff --git a/doc/presentation_review2/img/mbuf1.png b/doc/presentation_review2/img/mbuf1.png new file mode 100644 index 0000000..a6dab33 Binary files /dev/null and b/doc/presentation_review2/img/mbuf1.png differ diff --git a/doc/presentation_review2/img/multithreading.pdf b/doc/presentation_review2/img/multithreading.pdf new file mode 100644 index 0000000..d140180 Binary files /dev/null and b/doc/presentation_review2/img/multithreading.pdf differ diff --git a/doc/presentation_review2/img/multithreading2.pdf b/doc/presentation_review2/img/multithreading2.pdf new file mode 100644 index 0000000..29ac10d Binary files /dev/null and b/doc/presentation_review2/img/multithreading2.pdf differ diff --git a/doc/presentation_review2/img/multithreading_old.pdf b/doc/presentation_review2/img/multithreading_old.pdf new file mode 100644 index 0000000..f644d5d Binary files /dev/null and b/doc/presentation_review2/img/multithreading_old.pdf differ diff --git a/doc/presentation_review2/img/multithreding_old.svg b/doc/presentation_review2/img/multithreding_old.svg new file mode 100644 index 0000000..ca83cbb --- /dev/null +++ b/doc/presentation_review2/img/multithreding_old.svg @@ -0,0 +1,895 @@ + + + + + + image/svg+xml + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + PacketDissection + + + + + + + + + + + PacketDissection + + + + + + + + + + + + + + + T1 + + + + + + + + + + + + T1 + + + + + + + + + + + + + + + Inspection + + + + + + + + + Inspection + + + + + + + + + + + + + + + T2 + + + + + + + + + + + + T2 + + + + + + + + + + + Treatment + + + + + + + + + Treatment + + + + + + + + + + + + + + + T3 + + + + + + + + + + + + T3 + + + + + + + + + + + NicManagement + + + + + + + + + NicManagement + + + + + + + + + + + + + + + T0 + + + + + + + + + + + + T0 + + + + + + + + + + + + + NIC + + + + + + + + + + + NIC + + + + + + + + + + + + + + + + + + diff --git a/doc/presentation_review2/img/multitreading.svg b/doc/presentation_review2/img/multitreading.svg new file mode 100644 index 0000000..1f2d23c --- /dev/null +++ b/doc/presentation_review2/img/multitreading.svg @@ -0,0 +1,791 @@ + + + + + + image/svg+xml + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + NicManagement + + + + + + + + + + NicManagement + + + + + + + + + + + + PacketDissection + + + + + + + + + PacketDissection + + + + + + + + + + + + + + Treatment + + + + + + + + + + + Treatment + + + + + + + + + + + + + Inspection + + + + + + + + + + Inspection + + + + + + + + + + + + + + + T1 + + + + + + + + + + + + T1 + + + + + + + + + + + + + + + T0 + + + + + + + + + + + + T0 + + + + + + + + + + + + + + T1 + +0 + + + + + + + + + + + T1 + + + T10 + + + + + + + + + + + + + + + + + + diff --git a/doc/presentation_review2/img/multitreading2.svg b/doc/presentation_review2/img/multitreading2.svg new file mode 100644 index 0000000..3f2a480 --- /dev/null +++ b/doc/presentation_review2/img/multitreading2.svg @@ -0,0 +1,866 @@ + + + + + + image/svg+xml + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + NicManagement + + + + + + + + + + NicManagement + + + + + + + + + + + + PacketDissection + + + + + + + + + PacketDissection + + + + + + + + + + + + + + Treatment + + + + + + + + + + + Treatment + + + + + + + + + + + + + Inspection + + + + + + + + + + Inspection + + + + + + + + + + + + + + + T1 + + + + + + + + + + + + T1 + + + + + + + + + + + + + + + T0 + + + + + + + + + + + + T0 + + + + + + + + + + + + + + T1 + +0 + + + + + + + + + + + T1 + + + T10 + + + + + + + + + + + + + + + NIC + + + + + + + + + + + NIC + + + + + + + + + + + + + + + + diff --git a/doc/presentation_review2/img/polling.png b/doc/presentation_review2/img/polling.png new file mode 100644 index 0000000..9b37d40 Binary files /dev/null and b/doc/presentation_review2/img/polling.png differ diff --git a/doc/presentation_review2/img/roadmap/roadmap2.svg b/doc/presentation_review2/img/roadmap/roadmap2.svg new file mode 100644 index 0000000..53bab98 --- /dev/null +++ b/doc/presentation_review2/img/roadmap/roadmap2.svg @@ -0,0 +1,592 @@ + + + + + + image/svg+xml + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + PacketDissection + + + + + + + + + + + PacketDissection + + + + + + + + + + + + + + + Inspection + + + + + + + + + Inspection + + + + + + + + + + + Treatment + + + + + + + + + Treatment + + + + + + + + + + + NicManagement + + + + + + + + + NicManagement + + + + + + + + + + + + + NIC + + + + + + + + + + + NIC + + + + + + + + + + + + + + + + + + diff --git a/doc/presentation_review2/img/roadmap/roadmap2_1.svg b/doc/presentation_review2/img/roadmap/roadmap2_1.svg new file mode 100644 index 0000000..bd1c5f8 --- /dev/null +++ b/doc/presentation_review2/img/roadmap/roadmap2_1.svg @@ -0,0 +1,601 @@ + + + + + + image/svg+xml + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + PacketDissection + + + + + + + + + + + PacketDissection + + + + + + + + + + + + + + + Inspection + + + + + + + + + Inspection + + + + + + + + + + + Treatment + + + + + + + + + Treatment + + + + + + + + + + + NicManagement + + + + + + + + + NicManagement + + + + + + + + + + + + + NIC + + + + + + + + + + + NIC + + + + + + + + + + + + + + + + + + + diff --git a/doc/presentation_review2/img/roadmap/roadmap2_2.svg b/doc/presentation_review2/img/roadmap/roadmap2_2.svg new file mode 100644 index 0000000..271d8bf --- /dev/null +++ b/doc/presentation_review2/img/roadmap/roadmap2_2.svg @@ -0,0 +1,601 @@ + + + + + + image/svg+xml + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + PacketDissection + + + + + + + + + + + PacketDissection + + + + + + + + + + + + + + + Inspection + + + + + + + + + Inspection + + + + + + + + + + + Treatment + + + + + + + + + Treatment + + + + + + + + + + + NicManagement + + + + + + + + + NicManagement + + + + + + + + + + + + + NIC + + + + + + + + + + + NIC + + + + + + + + + + + + + + + + + + + diff --git a/doc/presentation_review2/img/roadmap/roadmap2_3.svg b/doc/presentation_review2/img/roadmap/roadmap2_3.svg new file mode 100644 index 0000000..c5dcaa7 --- /dev/null +++ b/doc/presentation_review2/img/roadmap/roadmap2_3.svg @@ -0,0 +1,601 @@ + + + + + + image/svg+xml + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + PacketDissection + + + + + + + + + + + PacketDissection + + + + + + + + + + + + + + + Inspection + + + + + + + + + Inspection + + + + + + + + + + + Treatment + + + + + + + + + Treatment + + + + + + + + + + + NicManagement + + + + + + + + + NicManagement + + + + + + + + + + + + + NIC + + + + + + + + + + + NIC + + + + + + + + + + + + + + + + + + + diff --git a/doc/presentation_review2/img/roadmap/roadmap2_4.svg b/doc/presentation_review2/img/roadmap/roadmap2_4.svg new file mode 100644 index 0000000..72b63d0 --- /dev/null +++ b/doc/presentation_review2/img/roadmap/roadmap2_4.svg @@ -0,0 +1,601 @@ + + + + + + image/svg+xml + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + PacketDissection + + + + + + + + + + + PacketDissection + + + + + + + + + + + + + + + Inspection + + + + + + + + + Inspection + + + + + + + + + + + Treatment + + + + + + + + + Treatment + + + + + + + + + + + NicManagement + + + + + + + + + NicManagement + + + + + + + + + + + + + NIC + + + + + + + + + + + NIC + + + + + + + + + + + + + + + + + + + diff --git a/doc/presentation_review2/img/rss/rss.svg b/doc/presentation_review2/img/rss/rss.svg new file mode 100644 index 0000000..d0f158f --- /dev/null +++ b/doc/presentation_review2/img/rss/rss.svg @@ -0,0 +1,1254 @@ + + + + + + image/svg+xml + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Middle-Box + + + + + + + + + Middle-Box + + + + + + + + + + + + + + + T0 + + + + + + + + + + + + T0 + + + + + + + + + + + + + + T1 + + + + + + + + + + + + T1 + + + + + + + + + + + Port + + + + + + + + + Port + + + + + + + + + + + + + Queue + + + + + + + + + Queue + + + + + + + + + + + + + + + + T1 + + +0 + + + + + + + + + + + T1 + + + T10 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/doc/presentation_review2/img/rss/sym_rss_problem.svg b/doc/presentation_review2/img/rss/sym_rss_problem.svg new file mode 100644 index 0000000..50817b8 --- /dev/null +++ b/doc/presentation_review2/img/rss/sym_rss_problem.svg @@ -0,0 +1,1242 @@ + + + + + + image/svg+xml + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Middle-Box + + + + + + + + + Middle-Box + + + + + + + + + + + + + + + + T0 + + + + + + + + + + + + T0 + + + + + + + + + + + + + + + T1 + + + + + + + + + + + + T1 + + + + + + + + + + + Port 0 + + + + + + + + + Port 0 + + + + + + + + + + + + + + + + + + + + + + + + + + + + T1 + +0 + + + + + + + + + + + T1 + + + T10 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Port 1 + + + + + + + + + Port 1 + + + + + + + + + + + + + + + + + + + + + diff --git a/doc/presentation_review2/img/rss/sym_rss_solution.svg b/doc/presentation_review2/img/rss/sym_rss_solution.svg new file mode 100644 index 0000000..7a62ce0 --- /dev/null +++ b/doc/presentation_review2/img/rss/sym_rss_solution.svg @@ -0,0 +1,1241 @@ + + + + + + image/svg+xml + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Middle-Box + + + + + + + + + Middle-Box + + + + + + + + + + + + + + + + T0 + + + + + + + + + + + + T0 + + + + + + + + + + + + + + + T1 + + + + + + + + + + + + T1 + + + + + + + + + + + Port 0 + + + + + + + + + Port 0 + + + + + + + + + + + + + + + + + + + + + + + + + + + + T1 + +0 + + + + + + + + + + + T1 + + + T10 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Port 1 + + + + + + + + + Port 1 + + + + + + + + + + + + + + + + + + + + + diff --git a/doc/presentation_review2/img/singleton.pdf b/doc/presentation_review2/img/singleton.pdf new file mode 100644 index 0000000..4682773 Binary files /dev/null and b/doc/presentation_review2/img/singleton.pdf differ diff --git a/doc/presentation_review2/img/singleton.png b/doc/presentation_review2/img/singleton.png new file mode 100644 index 0000000..445b089 Binary files /dev/null and b/doc/presentation_review2/img/singleton.png differ diff --git a/doc/presentation_review2/img/splicing.pdf b/doc/presentation_review2/img/splicing.pdf new file mode 100644 index 0000000..43d2818 Binary files /dev/null and b/doc/presentation_review2/img/splicing.pdf differ diff --git a/doc/presentation_review2/img/syn-paket.png b/doc/presentation_review2/img/syn-paket.png new file mode 100644 index 0000000..cd38832 Binary files /dev/null and b/doc/presentation_review2/img/syn-paket.png differ diff --git a/doc/presentation_review2/presentation2.pdf b/doc/presentation_review2/presentation2.pdf new file mode 100644 index 0000000..03fe1bb Binary files /dev/null and b/doc/presentation_review2/presentation2.pdf differ diff --git a/doc/presentation_review2/presentation2.tex b/doc/presentation_review2/presentation2.tex new file mode 100644 index 0000000..37468d4 --- /dev/null +++ b/doc/presentation_review2/presentation2.tex @@ -0,0 +1,347 @@ +\documentclass{beamer} +\usepackage[T1]{fontenc} +\usepackage[utf8]{inputenc} +\usepackage[german]{babel} +\usepackage{pdfpages} +\usepackage{amssymb} +\usepackage{enumerate} +\usepackage{array} +\usepackage{lmodern} +\usepackage{url} +\usepackage{hyperref} +\usepackage[all]{xy} +\usepackage[export]{adjustbox} +\usepackage{subcaption} +\usepackage{listings} +\usepackage{graphicx} +\graphicspath{{./img/}} + +%Farbschema +\definecolor{tuerkis}{rgb}{0.0, 0.65, 0.76} +\definecolor{weiss}{rgb}{1.0,1.0,1.0} +\definecolor{gruen}{rgb}{0.22, 0.74, 0.07} + +\usetheme{metropolis} +%\usecolortheme{whale} +\setbeamercolor{progress bar}{fg=gruen,bg=gruen} +\setbeamercolor{frametitle}{bg = gruen} +\setbeamercolor{background canvas}{bg = weiss} +\setbeamercolor{footline}{fg=gray} +\setbeamerfont{page number in head/foot}{size=\scriptsize} +\setbeamercolor{title}{fg = black} +\setbeamertemplate{frame footer}{ \insertlogo{\includegraphics[width=0.1\textwidth]{aegis_logo_with_name.pdf}} \hfill \insertsection} +\lstset{frame=single} + +%\logo{\includegraphics[width=.1\textwidth]{aegis_logo_with_name.pdf}\hspace*{.05\paperwidth}} +%\logo{\includegraphics[width=.1\textwidth]{img/aegis_logo_with_name.pdf}} +\newcommand\pipeline{\center \includegraphics[width=0.6\linewidth]{grobentwurf/packet_diagram_pipeline.png}} + +%Information to be included in the title page: +\title[Abwehr von Denial-of-Service-Angriffen durch effiziente User-Space Paketverarbeitung: AEGIS]{Abwehr von Denial-of-Service-Angriffen durch effiziente User-Space Paketverarbeitung: AEGIS} +\subtitle{Review für die Implementierungsphase} +\institute{Technische Universität Ilmenau} +\date{24.06.2021} + +\begin{document} + +\begin{frame} + \maketitle % Automatically created using the information in the commands above +\end{frame} + +\begin{frame}{Aufgabenstellung} + \center + \includegraphics[width=0.3\textwidth]{dpdk_logo.png} + \includegraphics[width=\textwidth]{Netzwerkplan-Real.png} + \center + Abwehrsystem gegen DoS-Angriffe +\end{frame} + +\begin{frame}{Aufgabenstellung} + \begin{itemize} + \item Die Software soll mehrere Varianten von Attacken abwehren + \item Nur eine davon ist für diesen Vortrag relevant: + \end{itemize} + \center + \textbf{SYN-Flood-Attacke} + \begin{figure}[h!] + \includegraphics[width=0.5\textwidth]{SYN-FLOOD.png} + \end{figure} +\end{frame} + +\begin{frame}{Gliederung} + \begin{enumerate} + \item \textbf{Grobentwurf} + \item \textbf{Feinentwurf} + \begin{enumerate} + \item Komponente: NicManagement + \item Komponente: PacketDissection + \item Komponente: Inspection + \item Komponente: Treatment + \item Einsatz von mehreren Threads + \item Alternative Entwürfe + \end{enumerate} + \item \textbf{Entwurfsmuster} + \item \textbf{Stand des Projekts} + \item \textbf{Ausblick} + \end{enumerate} +\end{frame} + +% ===== G R O B E N T W U R F ===== % +\begin{frame}{Grobentwurf} + \begin{center} + %\includegraphics[width=\linewidth]{grobentwurf/packet_diagram.pdf} + \end{center} +\end{frame} + +\begin{frame}{Grobentwurf} + \begin{center} + %\includegraphics[width=0.95\linewidth]{roadmap/roadmap2.pdf} + Die Architektur folgt dem Pipeline-Modell. + \end{center} +\end{frame} + +% ===== F E I N E N T W U R F ===== % +\begin{frame}{Feinentwurf} + %\includegraphics[width=\textwidth]{roadmap/roadmap2_1.pdf} +\end{frame} + +\begin{frame}{Feinentwurf: NicManagement} + \begin{figure} + \includegraphics[width=0.3\textwidth]{dpdk_logo.png} + \includegraphics[width=\linewidth]{polling.png} + \center + effizient Pakete von der NIC bekommen: Polling + \end{figure} +\end{frame} + +\begin{frame}{Feinentwurf: PacketDissection} + %\includegraphics[width=\textwidth]{roadmap/roadmap2_2.pdf} +\end{frame} + +\begin{frame}{Feinentwurf: PacketDissection} + %\includegraphics[width=\textwidth]{roadmap/roadmap2_2.pdf} + \begin{itemize} + \item extrahiert Informationen aus den Paketen + \item stellt diese für die folgenden Komponenten bereit + \end{itemize} +\end{frame} + +\begin{frame}{Feinentwurf: Inspection} + %\includegraphics[width=\textwidth]{roadmap/roadmap2_3.pdf} +\end{frame} + +\begin{frame}{Feinentwurf: Inspection} + \begin{minipage}[h]{0.45\textwidth} + \begin{figure}[h!] + \includegraphics[width=\textwidth, center]{inspection.pdf} + \end{figure} + \end{minipage} + \hfill + \begin{minipage}[h]{0.45\textwidth} + \begin{itemize} + \item Klasse Analyzer + \item Filterung aller Pakete der Netzwerkprotokolle UDP, TCP, ICMP + \item Abwehr von SYN-FIN-Angriffen + \end{itemize} + \end{minipage} +\end{frame} + +\begin{frame}{Feinentwurf: Inspection} + \includegraphics[width=\textwidth, center]{analyzerDiagram.png} +\end{frame} + +\begin{frame}{Feinentwurf: Treatment} + %\includegraphics[width=\textwidth]{roadmap/roadmap2_4.pdf} +\end{frame} + +\begin{frame}{Feinentwurf: Treatment} + \includegraphics[width=\textwidth, center]{Treatment_ohne_Container_mit_Schatten.pdf} +\end{frame} + +\begin{frame}{Feinentwurf: Treatment} + \begin{minipage}[h]{0.45\textwidth} + \includegraphics[width=\textwidth, center]{SYN-FLOOD.png} + \end{minipage} + \hfill + \begin{minipage}[h]{0.45\textwidth} + \begin{itemize} + \item SYN-Flood-Abwehr mit SYN-Cookies + \item keine Reservierung von Ressourcen beim Aufbau + \end{itemize} + \end{minipage} +\end{frame} + +\begin{frame}{Feinentwurf: Treatment} + \begin{minipage}[h]{0.5\textwidth} + \includegraphics[width=\textwidth, center]{splicing.pdf} + \end{minipage} + \hfill + \begin{minipage}[h]{0.45\textwidth} + \begin{itemize} + \item TCP-Proxy + \item Middle-Box als Vermittler + \end{itemize} + \end{minipage} +\end{frame} + +\begin{frame}[fragile] + \frametitle{Implementierung Treatment} + {\footnotesize + \begin{lstlisting} +Treatment::treat_packtes(){ + for packet in packet_to_inside{ + if(packet.get_type() == packet_type_tcp){ + flags = packet.get_flags(); + if(flags.is_pure_syn()){ + syn_cookie = calc_cookie(connection_data); + reply_packet = get_empty_packet_to_outside; + reply_packet.fill(connection_data,syn_cookie); + } + else if(...){...} + ... + } + } +} + \end{lstlisting} + } +\end{frame} + +\begin{frame}{Feinentwurf: Einsatz von Threads} + \begin{itemize} + \item eine Pipeline \(\rightarrow\) nur ein Thread nötig + \end{itemize} + %\includegraphics[width=\linewidth]{roadmap/roadmap2.pdf} +\end{frame} + +\begin{frame}{Feinentwurf: Einsatz von Threads} + \begin{itemize} + \item Wünsche für Effizienz: + \begin{itemize} + \item mehrere Threads parallel + \item gleichmäßig ausgelastet + \item keine Kommunikation + \end{itemize} + \end{itemize} + \includegraphics[width=\linewidth]{multithreading2.pdf} +\end{frame} + +\begin{frame}{Feinentwurf: Einsatz von Threads} + \begin{itemize} + \item Pakete aufgeteilt durch ,,RSS'' (Receive Side Scaling) + \begin{itemize} + \item realisiert durch Hashing + \item Schlüssel: \texttt{[Src-IP; Dst-IP; Src-Port; Dst-Port]} + \end{itemize} + \end{itemize} + \begin{figure} + \center + %\includegraphics[width=0.8\linewidth]{rss/rss.pdf} + \end{figure} + \begin{itemize} + \item \textbf{gleichmäßige Auslastung} (wegen Hashing) + \end{itemize} +\end{frame} + +\begin{frame}{Feinentwurf: Einsatz von Threads} + \begin{itemize} + \item Problem: Verschiedene Zuordnung je Seite + \begin{itemize} + \item[\(\rightarrow\)] Inter-Thread-Kommunikation nötig! + \end{itemize} + \end{itemize} + \begin{figure} + \center + %\includegraphics[width=\linewidth]{rss/sym_rss_solution.pdf} + \end{figure} +\end{frame} + +\begin{frame}{Feinentwurf: Einsatz von Threads} + \begin{itemize} + \item Lösung: ,,Symmetric RSS'' + \begin{itemize} + \item \texttt{[\textbf{Src-IP}; \textit{Dst-IP}]} \(\equiv\) \texttt{[\textit{Dst-IP}; \textbf{Src-IP}]} + \item[\(\rightarrow\)] \textbf{keine Inter-Thread-Kommunikation nötig} + \end{itemize} + \end{itemize} + \begin{figure} + \center + %\includegraphics[width=\linewidth]{rss/sym_rss_problem.pdf} + \end{figure} +\end{frame} + +\begin{frame}{Feinentwurf: Alternative Entwürfe} + % Alternativen (Implementierungsentscheidungen, Grobentwurfsänderung) + \begin{figure} + \center + \includegraphics[width=\textwidth]{multithreading_old.pdf} + \end{figure} + \begin{itemize} + \item alternativ: ein Thread pro Komponente + \item Nachteil: zu viel Inter-Thread-Kommunikation + \end{itemize} +\end{frame} + +\begin{frame}{Entwurfsmuster} + \begin{minipage}[h]{0.45\textwidth} + \begin{figure}[h!] + \includegraphics[width=\textwidth]{singleton.pdf} + \end{figure} + \end{minipage} + \hfill + \begin{minipage}[h]{0.45\textwidth} + \begin{itemize} + \item Erzeugungsmuster + \item Nur ein Objekt dieser Klasse + \item Globale Informationsbereitstellung + \item Verwendung im Configurator + \end{itemize} + \end{minipage} +\end{frame} + +\begin{frame}{Was AEGIS bisher kann} + \begin{minipage}[h]{\textwidth} + \center + \begin{minipage}[h]{0.5\textwidth} + \center + \includegraphics[width=\textwidth]{done/done1.png} + Pakete weiterleiten + \end{minipage} + \begin{minipage}[h]{0.25\textwidth} + \center + %\includegraphics[width=\textwidth]{done/done2.pdf} + Multithreading + \end{minipage} + \end{minipage} + \vspace{0.5cm} + \begin{minipage}[h]{\textwidth} + \center + \begin{minipage}[h]{0.3\textwidth} + \center + \includegraphics[width=0.5\textwidth]{done/done3.png} + Informationen aus Paketen extrahieren + \end{minipage} + \end{minipage} +\end{frame} + +\begin{frame}{Ausblick} + \begin{itemize} + \item Anforderungen unverändert + \item Überprüfung wichtiger Anforderung + \item Erweiterung um Angriffe und ihre Abwehrmechanismen + \end{itemize} +\end{frame} + +\begin{frame}{Bildquellen} + \begin{itemize} + \tiny + \item https://www.onlinewebfonts.com/icon/571002 [Abgerufen am 22.06.2021] + \end{itemize} +\end{frame} + +\begin{frame} + \begin{center} + \textbf{Vielen Dank für Ihre Aufmerksamkeit!} + \end{center} +\end{frame} + +\end{document} \ No newline at end of file