1) graph_to_mininet.py
Script is used to convert GraphML file into a mininet topology file. Topology Zoo provides several topologies in the GrpahML form. You can find the different topologies here.
python graph_to_mininet.py -f path_to_graphml_file
2) mininet_to_deter.py
Script is used to convert the mininet file obtained in the previous version to NS file. Deterlab accepts this NS file.
3) list_of_cities
A file generated in the Setup foldler which maps individual ASN to an unique number. To access ASN Albama, look up for the number allocated in list_of_cities. For example, if Alabama is allocated 2,you could access Alabama,by
ssh i2.experiment_name.project_name
Note: Each link between ASNs contains an OpenVSwitch which is used for the traffic_query and traffic_filter commands. To access this OpenVSwitch,
ssh i{city_1_number}a{city_2_number}.experiment_name.project_name
where city_1_number < city_2_number (These numbers are accesed using the list_of_cities file)
4)connectivity_check.py
This script is used to check if all the nodes which are setup in the experiment are available. Deterlab takes a few minutes to set up containerised experiments.
5) Setting up the controller
Install the dependencies for controller
sudo python ryu_dependnties/install.py
Install RYU
cd ryu/ryu
sudo python setup.py install
Run controller
cd ryu/ryu/app/
sudo ryu-manager ofctl_rest.py --ofp-list-host {ip_of_controller}
Install Apache
sudo apt-get install apache2 php5
sudo cp -r apache_files/* /var/www/html
5)setup.py
Script is used to install OpenvSwitch and Quagga on nodes. Make sure that the controller is running. You could access the controller, ssh controller.experiment_name.project_name
python setup.py controller_ip
ssh user_name@users.deterlab.net -L 8118:controller.experiment_name.project_name.isi.deterlab.net:80
To access the Server GUI:-
http://localhost:8181/index.php
A two factor authentication is used to validate the ISP.
![] (https://raw.githubusercontent.com/sivaramakrishnansr/ISPSecurity/master/SENSS.-.Login.png)
Add a new switch to the existing topology.
Name of the switch - Used for logging. In the case of a switch between Alabama(unique_number is 2) and Los Angeles(unique_number is 5) , the name of the switch is i2a5
Switch Username - Username of the node in deterlab running the switch
Switch Password - Password of the node in deterlab running the switch
Controller IP - IP address in which the controller is running
Controller Port - Port at which the controller is running
Removes the switch from the topology by disconnecting the switch from the controller and uninstalling Openvswitch.
Name of the switch - Used for logging. In the case of a switch between Alabama(unique_number is 2) and Los Angeles(unique_number is 5) , the name of the switch is i2a5
Switch Username - Username of the node in deterlab running the switch
Switch Password - Password of the node in deterlab running the switch
Logs the requests/response from the customer.
Enables the ISP to add a new customer Customer Name - Name of the customer IP Prefix - IP prefixes which are owned by the customers Public Key/RPKI - Method adopted to verify the ownership of the IP prefixes.
Views all the customers
Can be accessed at http://localhost:8080/direct_floods_form.php
Client GUI can be used to handle direct floods without signature attacks. These are attacks which do not have any signature associated with them, and can be handled by SENSS constantly monitoring its traffic, and blocking traffic when a certain anamoly is detected.
Sending traffic query request to the SENSS server.
Observation Time - Duration to observe the traffic
Total Request - Total number of requests
Tag - IN/OUT/SELF
ISP - Choose the partnering ISP
View the traffic queries and take action
