you set the focus
The iLab Experience
a blended learning hands-on course concept
Do It Yourself - Hardware YE - Topic Outline
May 29, 2018
The iLab Experience a blended learning hands-on course concept you - - PowerPoint PPT Presentation
The iLab Experience a blended learning hands-on course concept you set the focus Do It Yourself - Hardware YE - Topic Outline May 29, 2018 10.4. Kick Off, IPv6 1 IPv6 BGP 17.4. 2 Minilab 1 2 mini labs Advanced Wireless Playground BGP
you set the focus
The iLab Experience
a blended learning hands-on course concept
Do It Yourself - Hardware YE - Topic Outline
May 29, 2018
YE 1st Lecture IoT DIY HW YE Topic Outline Kick Off, IPv6 IoT Smart Space SW & measr Advanced Wireless Playground Minilab 2 YE Didactics, Tools & iAdvise YE Review Presentation YE Final Presentation, Wrap-Up
10.4. 17.4. 24.4. (1.5.) 8.5. 15.5. (22.5.) 29.5. 5.6. (12.6.) 19.6. 26.6. 3.7.BGP Minilab 1 WWW Security Your Exercise Topic Pitch summer term 2018
10.7.Giving good Feedback Prepare Your Exercise Prepare Your Exercise
10Collaborative Memory
what are the most important things to remember from the last lab?
Oral Attestations
the exam and ask each other for some time about the topics. Do actually fully answer them to each other.
you set the focus
The iLab Experience
a blended learning hands-on course concept
Your Exercise - Topic Ouline
Your Exercise Sequence
Voting Outline 1st Lecture Review Final Lecture
Get topic ideas Present 1st ideas Introduce the relevant background to your topic Get and give feedback Present the main learning points and background. 5.6. 19.6. 26.6. 3.7. 10.7. 29.5. 14.5. underlined = you present something hereDidactics Giving Feedback
8.5. Intense TutoringAvailable Topics
Order of Presentations
Team Topic 203 Scanning DNS and DNSSec and mapping results to ASN/Geolocations 205 DNS delegations to other zones & querying DNS with GO 206 DNSSec with Linux Tools and GO 201 RPKI Validation 207 go-tlsscanner, BGPStream, and AS dynamics 208 MassDNS 209 DANE-TLSA 204 CAA 202 Certificate Transparency and OCSP revocation
create your own exercise
Scanning DNS + DNSSEC and mapping to ASN/Geolocation
Victoria Simon, Kostiantyn Redko, Group 203
1Outline Lecture
– DNS introduction – DNS file example – DNS operators – DNSSEC overview
– What is it used for
2Outline PreLab
– Give some more background on DNS/DNSSEC – Give a short introduction to command line tools and Go – Give an example program that uses geoip2 database
– Basic understanding of DNS and DNSSEC – Introduction to Go programming language
– Dig, whois – geoip2-golang tool and database
3Outline Lab
– Alexa 10k – Random 10k
Learning Goals
5The Following Learning Goals are Covered in the Lecture PreLab Lab
Better understanding of DNS and DNSSEC
X X X
Identify common errors when scanning
X
large-scale Scan DNS and DNSSEC
X
Better understanding of Go
X X
Use Go to perform IP address mapping and to do statistics
X
Teaser Practical Part
6DNS Server Client
Order of Presentations
Team Topic 203 Scanning DNS and DNSSec and mapping results to ASN/Geolocations 205 DNS delegations to other zones & querying DNS with GO 206 DNSSec with Linux Tools and GO 201 RPKI Validation 207 go-tlsscanner, BGPStream, and AS dynamics 208 MassDNS 209 DANE-TLSA 204 CAA 202 Certificate Transparency and OCSP revocation
Order of Presentations
Team Topic 203 Scanning DNS and DNSSec and mapping results to ASN/Geolocations 205 DNS delegations to other zones & querying DNS with GO 206 DNSSec with Linux Tools and GO 201 RPKI Validation 207 go-tlsscanner, BGPStream, and AS dynamics 208 MassDNS 209 DANE-TLSA 204 CAA 202 Certificate Transparency and OCSP revocation
DNSSEC - reach the website you asked for
Alvin, J.Erasmus - group 206
1Outline - Lecture
Outline PreLab
○ DNS (small revision) ○ GO programming (small tutorial?)
DNS/DNSSEC records
3Outline Lab
What Will Your Students Learn?
5The Following Learning Goals are Covered in the Lecture PreLab Lab DNSSEC security and the concept of delegation X X DNSSEC zone walking X x The use of DS, DNSKEY, RRSIG, NSEC and NSEC3 x X X Use Go to query DNSSEC records, verify signature of RRSIG, and complete DNSSEC chain X x
Teaser Practical Part
6webserver serv.sub.top DNS-Server (for sub.top) DNS-server (for top) sub domain .sub.top top domain .top client
1 2 5 4
Order of Presentations
Team Topic 203 Scanning DNS and DNSSec and mapping results to ASN/Geolocations 205 DNS delegations to other zones & querying DNS with GO 206 DNSSec with Linux Tools and GO 201 RPKI Validation 207 go-tlsscanner, BGPStream, and AS dynamics 208 MassDNS 209 DANE-TLSA 204 CAA 202 Certificate Transparency and OCSP revocation
create your own exercise
Securing Internet Routing using RPKI
Team 201: Eidenmüller, Thomas; Schwarzenberg, Christoph
1Outline Lecture
Outline PreLab
Outline Lab
➢ Discover effects of secured routing
4What Will Your Students Learn?
5The Following Learning Goals are Covered in the Lecture PreLab Lab Learn about RPKI and RPKI ROA X X Deploy a partially RPKI validated Internet X X Understand and exploit the max. prefix length problem X X Understand and verify the chain of trust X X X Discover the effects of secured routing X X X
Teaser Practical Part
6RPKI Validator AS 1 “Good AS“ AS 2 “Good AS“ AS 3 “Bad AS“ User (Ping) Monitor3
Order of Presentations
Team Topic 203 Scanning DNS and DNSSec and mapping results to ASN/Geolocations 205 DNS delegations to other zones & querying DNS with GO 206 DNSSec with Linux Tools and GO 201 RPKI Validation 207 go-tlsscanner, BGPStream, and AS dynamics 208 MassDNS 209 DANE-TLSA 204 CAA 202 Certificate Transparency and OCSP revocation
iLab2 —Your own exercise BGP Anomaly Analysis
207 Inkeri Sepp¨ al¨ a & Philipp Trucks¨ aß
Outline Lecture
TLS encryption & authentication Routing, BGP artifacts, prefixes, anomalies & hijacks Recognizing attacks and differentiate from accidents
Outline PreLab
Basic understanding of certificates & BGP routing Differentiate anomalies & attacks through continuous TLS scanning Tools: BGPStream, go-tlsscanner, golang scripting
Outline Lab
Run TLS scan on Alexa Top 1M & hash certificates Use BGPStream for historical and live data & evaluate output Write go-script to detect (sub)MOAS events from the stream Detect affected domains Extend script to identify legitimate anomalies via TLS key consistency
What will your students learn?
The following learning goals are covered in the Lecture PreLab Lab Understand BGP and its vulnerabilities x x Understand what TLS is used for x x Use BGPStream & understand output x x Take advantage of go-tlsscaner x x Identify & understand BGP anomalies x x Utilize TLS to distinguish artifacts & attacks x x Write scripts for massive data evaluation xTeaser practical part
WWW 1x PC pp. Access to WWW golang development setup
Order of Presentations
Team Topic 203 Scanning DNS and DNSSec and mapping results to ASN/Geolocations 205 DNS delegations to other zones & querying DNS with GO 206 DNSSec with Linux Tools and GO 201 RPKI Validation 207 go-tlsscanner, BGPStream, and AS dynamics 208 MassDNS 209 DANE-TLSA 204 CAA 202 Certificate Transparency and OCSP revocation
create your own exercise
Who has the DNS?
Shen Hu and Andreas Wehe (208)
1Outline Lecture
Outline PreLab
Outline Lab
What Will Your Students Learn?
5The Following Learning Goals are Covered in the Lecture PreLab Lab Understand DNS participants: authority, cache, resolver X X X Understand challenge of probing the internet at scale X X Learn to use tools: dig, massDNS/Zmap X X Employ IpyNB for number crunching for visualization X X Reflect roles of DNS providers in the infrastructure X X X
Teaser Practical Part
6This is your playground:
The Internet
Order of Presentations
Team Topic 203 Scanning DNS and DNSSec and mapping results to ASN/Geolocations 205 DNS delegations to other zones & querying DNS with GO 206 DNSSec with Linux Tools and GO 201 RPKI Validation 207 go-tlsscanner, BGPStream, and AS dynamics 208 MassDNS 209 DANE-TLSA 204 CAA 202 Certificate Transparency and OCSP revocation
Trust me, I am a DANE-TLSA
Sebastian Borchers, Mihailo Rajacic, Team 209
1Outline Lecture
➢ Problems with CA we are facing currently ➢ If CA is hacked/breached, attackers can issue certificates and fake for example to be your bank's website. Knowing that lots of CA’s exist, it can bring a lot of potential attacks ➢ Solution: DANE-TLSA ➢ We explain what it is and how it can solve the problem ➢ Why is it not yet mass deployed? ➢ What is so interesting? ➢ DNS is one of the key components of the Internet, but it is also vulnerable -> you enhance this and make it more secure ➢ Imagine you want to do your online banking, but somebody fakes the certificate of your bank's website and scams you. With Dane-TLS it would not have happened
2Outline PreLab
In prelab we are planning to show: ➢ Brief reminder of how basic DNS works Introduce NSLookUp/Dig/... ➢ Why DANE-TLSA is necessary (Security, independence of CAs) ➢ TLSA-Record: Usage and Structure ➢ How DNS is more secure with DANE ➢ Highlighting the necessity of DNSSEC, in order for DANE to be trustworthy
3Outline Lab
4In Lab part our goal is to: ➢ Setup Lab system script ➢ Write Go code template to retrieve certificates with TLS ➢ Write Go code template to retrieve DANE-TLSA records and parse them according to the 2x3 different storage options defined by the IETF ➢ Write Go code template to determine whether a certificate retrieved via TLS is correctly specified in DANE-TLSA ➢ Perform Man In the Middle attack ➢ Make efficient hints for students to complete Go code templates and make them work
What Will Your Students Learn?
5The Following Learning Goals are Covered in the Lecture PreLab Lab Understand theoretical aspect of DANE-TLSA X X Learn why DANE-TLSA is important, but not yet in mass use X X Understand and use TLS certificates X X X Learn importance of DNS security X X X Complete Go code exercises on DANE-TLSA X
Teaser Practical Part
6 PC3: Attacker PC1: Client PC5: DNS Server PC4: Web serverLiteratureYour Students Learn?
[1.] https://tools.ietf.org/html/rfc6698 [2.]https://docs.google.com/document/d/1UFdNEBR65OPrLNlvfWIyyolSF0U2WrnateKl7o s5yaE/edit?usp=sharing [3.] https://datatracker.ietf.org/meeting/87/materials/slides-87-dane-2
Order of Presentations
Team Topic 203 Scanning DNS and DNSSec and mapping results to ASN/Geolocations 205 DNS delegations to other zones & querying DNS with GO 206 DNSSec with Linux Tools and GO 201 RPKI Validation 207 go-tlsscanner, BGPStream, and AS dynamics 208 MassDNS 209 DANE-TLSA 204 CAA 202 Certificate Transparency and OCSP revocation
create your own exercise
Certification Authority Authorization (CAA)
Caroline Gergen | Juan Jaramillo | 204
1Outline Lecture
Outline PreLab
Outline Lab
What Will The Students Learn?
5The Following Learning Goals are Covered in the Lecture PreLab Lab Theoretical background of CAA X Pros and contras of CAA X Understand the CAA format X X Retrieve and parse CAA Records X X Usage of the „dnscaa“ tool X Handle revoked CAA Records X
Teaser Practical Part
6This is your playground:
3x Quad Core fast PC with 3-4 usable LAN interfaces per machine. 2x Ethernet switch 2x Work Place with KVM DNS Server Webserver (Domain) PC for retrieving CAA records, etc.Order of Presentations
Team Topic 203 Scanning DNS and DNSSec and mapping results to ASN/Geolocations 205 DNS delegations to other zones & querying DNS with GO 206 DNSSec with Linux Tools and GO 201 RPKI Validation 207 go-tlsscanner, BGPStream, and AS dynamics 208 MassDNS 209 DANE-TLSA 204 CAA 202 Certificate Transparency and OCSP revocation
create your own exercise
Guess the correct log – CT insights
Berkay Kozan, Jan Krol Group 202
1Outline Lecture
your planned lab?
Outline PreLab
Outline Lab
establish a TLS connection to the game show safe
game
4What Will Your Students Learn?
5The Following Learning Goals are Covered in the Lecture PreLab Lab Students understand CT operation X X X Students understand the vulnerabilities of SSL. X X Students understand how log proof works X X Students write code to fetch data from CT log X X Students write code to compare SCT in TLS connection with logged SCT X X Students write a small Auditor for CT that fetches SCTs regularly and compares with what it sees in the TLS connection X
Adapted from Your Exercise: Topic PresentationTeaser Practical Part
6ds2os.org/
Orchestration Distributed Smart 2pace System
DIY - Hardware Creation
Orchestration Distributed Smart 2pace System
Smart Space Orchestration
Physical World Physical World Computer Virtual World Computer
Three parts
autonomous management, …
system.
ds2os.org/
Orchestration Distributed Smart 2pace System
ID card-based Reconfiguration of a Smart Room
77Profile mop Profile b Profile Standby
The ID cards can be used to configure Smart Environments
Profile Store 78Profile mop Profile b Profile Standby
ID card Profile Store Profile mop Profile b Profile StandbyThe ID cards can be used to configure Smart Environments
alarm ceiling light PC shutters … 79DIY Hardware
13€ 60€ 10€ 40€
Dave Mellis Tom Igoe Gianluca Martino David Cuartielles Massimo Banzi time 2005 Creating your own hardware is difficult. Creating your own hardware is easy. *HW Maker Culture
83Orchestration Distributed Smart 2pace System
TWO DIY Maker Cultures
DIY Hardware
DIY Software
Arduino DS2OS Smart Device Smart Space App time ?
A computing system that is typically embedded, interfaces its environment via sensors and actuators, and can be remotely managed.2005
Portable easy-to-program applications that manage smart environments. 84Creating your own IoT Software Apps is difficult. Creating your own IoT Software Apps is easy.
Orchestration Distributed Smart 2pace System
DIY Hardware
DIY Hardware
DIY Software Arduino DS2OS Smart Device Smart Space App time 2016
ds2os.org/
Orchestration Distributed Smart 2pace System
s2o - hardware
Marc-Oliver Pahl
Orchestration Distributed Smart 2pace System
What is this about?
Smart Devices
A hardware device that can sense and interact with its environment via sensors and actuators, and that can be managed remotely using software is called Smart Device.
Smart Spaces
A physical space that contains smart devices is called Smart Space.
Smart Space Orchestration
Monitoring and controlling (managing) Smart Devices within a Smart Space with software is called Smart Space Orchestration.
Orchestration Distributed Smart 2pace System
Creating Hardware
time 2005 Creating your own hardware is difficult. Creating your own hardware is easy.
Orchestration Distributed Smart 2pace System
Massimo Banzi - one of the creators of Arduino 2012 TED talk
Orchestration Distributed Smart 2pace System
Arduino Video
every field you could imagine”
Orchestration Distributed Smart 2pace System
Do It Yourself (DIY) Hardware
You will experience it in this lab…
Orchestration Distributed Smart 2pace System
Introduction to Electronics
The electrical engineering details will not be part of the exam. Slides by Alexander Güssow
Orchestration Distributed Smart 2pace System
How is a Breadboard cabled?
Agenda
– Voltage and current – Units and parameters – Resistance: Ohms Law and Kirchhoff's Laws – (Light Emitting) Diodes
Voltage in practice
DC Voltage
AC Voltage
Voltmeters measure static and fluctuating voltages
Source: Fluke 80 Series V User Manual, May 2004 Rev.2, 11/08, page 14 8Oscilloscopes display time-variant voltage curves
Source: https://www.adafruit.com/products/2145, 18.11.2015Current
– Charge Flow?
Current is the charge flow rate in a circuit in Coulomb/s.
10Current in practice
Ammeters measure static and fluctuating currents
Source: Fluke 80 Series V User Manual, May 2004 Rev.2, 11/08, page 25 12Voltage and Current
Measurements
14 Source: https://commons.wikimedia.org/wiki/File:Masc henregel.svg, 19.11.15 Source: Adapted from http://www.elektronik-kompendium.de/sites/grd/0201113.htm, 19.11.15Common units and parameters
15Name Symbol SI-Unit Formula Voltage U or u(t) or V V Current I or i(t) A Electric Power P W 𝑄 = 𝑉 ⋅ 𝐽 Electric Energy W Ws, J 𝑋 = 𝑄 ⋅ 𝑢 Electrical resistance R Ohm (Ω) 𝑆 = 𝑉/𝐽
Ohms Law
their value
Resistance
𝑆 = 𝑉 𝐽 Resistor (circuit symbol) Resistor (picture)
𝐽(𝑉) = 𝑉 ⋅ 1 𝑆
Resistor Current-Voltage characteristic
Resistor color codes
Source: http://www.digikey.com/- /media/Images/Marketing/Resources/Calcul ators/resistor-color-chart.jpg, 19.11.15 18Kirchhoffs 1st Law
„The sum of currents into and out of any single node of a network is always zero.“ Pay attention to the direction of the current-arrows:
Kirchhoffs 1st law holds for all nodes in a circuit.
𝑗𝑙
𝑜 𝑙=1
= 0
Source: http://www.elektronik-kompendium.de/sites/grd/0608011.htm, 19.11.2015𝐽 − 𝐽1 − 𝐽2 − 𝐽3 = 0
Source: https://commons.wikimedia.org/wiki/File:Kirchhoff%27s_Current_Law.svg, 19.11.2015Kirchhoffs 2nd Law
„The sum of Voltages in any closed loop through a cirquit is always zero.“ Source: http://www.elektronik-kompendium.de/sites/grd/0608011.htm, as of 19.11.2015
𝑉2 + 𝑉1 − 𝑉𝑟1 − 𝑉𝑟2 = 0
Source: https://en.wikipedia.org/wiki/File:Kirshhoff-example.svg, as of 19.11.2015𝜁1 − 𝑆1 ⋅ 𝑗1
𝑃ℎ𝑛𝑡 𝑀𝑏𝑥
− 𝑆2 ⋅ 𝑗2 = 0 𝜁2 − 𝜁1 − 𝑆2 ⋅ 𝑗2 − 𝑆3 ⋅ 𝑗3 = 0
Resistor superposition
Series circuit 𝑆𝑢𝑝𝑢𝑏𝑚 = 𝑆𝑙 𝑜 𝑙=1 Parallel circuit 𝑆𝑢𝑝𝑢𝑏𝑚 = 1 1 𝑆𝑙 𝑜 𝑙=1Source: http://www.iris.uni-stuttgart.de/lehre/eggenberger/eti/, Chapter 8, as of 19.11.2015
Voltage divider circuit
Known: U Wanted: R1 and R2 such that U1 and U2 are what we want
𝑉1 = 𝑉 𝑆1 𝑆𝑘
𝑜 𝑘=0
changes U1 and U2
Source: https://commons.wikimedia.org/wiki/File:Einfacher- unbelasteter-Spannungsteiler.svg, as of 19.11.2015Current divider circuit
Given I, R1 and R2, what are I1 and I2? 𝐽1 = 𝐽 1/ 1/𝑆𝑘
𝑜 𝑘=0
𝑆1
Source: https://commons.wikimedia.org/wiki/File:Stromteiler.svg, as of 19.11.2015(Light Emitting) Diodes – I-V Diagram
Source: http://electronics.stackexchange.com/questions/76367/accounting-for- led-resistance, as of 19.11.15
LEDs I-V Diagram, Case specs
Source: http://www.electronics.dit.ie/staff/tscarff/DT089_Physical_Computing_1 /LEDS/Leds.htm, as of 19.11.15
How to actually use LEDs
𝐸 = 𝐽𝑇 𝑓
𝑊𝐸 𝑜⋅𝑊𝑈 − 1
𝑛𝑏𝑦
80% 𝐽𝐺
𝑛𝑏𝑦 when the circuit is operating
Resistor-Diode and Diode I-V Diagram
Source: Own work using LTSpice simulation program, IN4148 Diode
Common Sensors
Resistive type
with measure
linear Digital type
conversion on-chip
– PWM (Automotive) – Manufacturer specific protocol – Bus (I2C, CAN, ...)
Microcontroller interfaces
I2C / TWI GND, TCL, SDA Master-Slave-Bus GPIOs PxN, i.e. PB1
29UART / Serial TIA-232-F GND, Rx, Tx Point-to-Point SPI SCLK, MOSI, MISO, nSS / nCS Master-Slave-Bus Selected Star or Daisy-Chaining
Using Manufacturer Specific Interfaces
– Voltage levels – Timing requirements – Sample comm diagrams
protocol analyzer)
(Embedded) Computer Architecture
Bare metal
– Preemption – Priorities – Cyclic approach – Event driven approach
Operating system
deterministic
– Priority Scheduling – Preemptive Scheduling
known / bounded
Arduino Mega 2560
Arduino Hardware Architecture
36ATmegaX: 8-Bit Harvard RISC
Source(s): https://nishantnath.com/2012/03/23/introduction-to-atmega-microcontrollers/, as of 23.05.16USB/Programmer (ATmega16U2)
you set the focus
The iLab Experience
a blended learning hands-on course concept
Your Exercise - Topic Ouline
echniques & Preparation
peer grading
presentation (both talk!)
* 1st structure => mature structureplanned improvements
Expected Artefacts
your exercise
Marc-Oliver Pahl 2017 5.6. 19.6. 26.6. 3.7. 10.7. 29.5. 8.5. Intense TutoringiAdvise
ralph.holz@sydney.edu.au Mon Tue Wed Thu Fri
Exchanging about the Plan Progress Report and remaining Steps Each team ~1h Each team ~1h
Enjoy =)
Flickr:nist6dh