예제 #1
0
    def evaluate_image(self, image_name, container_id):
        # Init
        data = {}

        # -- Static analysis
        image_name = self.dockerDriver.get_docker_image_name_by_container_id(container_id) if container_id \
                                                                                           else image_name
        os_packages = []
        malware_binaries = []
        dependencies = None
        temp_dir = None
        try:
            # Get OS packages
            if container_id is None:  # Scans the docker image
                os_packages = os_info_extractor.get_soft_from_docker_image(
                    docker_driver=self.dockerDriver, image_name=image_name)
                temp_dir = extract_filesystem_bundle(
                    docker_driver=self.dockerDriver, image_name=image_name)
            else:  # Scans the docker container
                os_packages = os_info_extractor.get_soft_from_docker_container_id(
                    docker_driver=self.dockerDriver, container_id=container_id)
                temp_dir = extract_filesystem_bundle(
                    docker_driver=self.dockerDriver, container_id=container_id)

            # Get malware binaries
            malware_binaries = malware_extractor.get_malware_included_in_docker_image(
                docker_driver=self.dockerDriver, temp_dir=temp_dir)

            # Get programming language dependencies
            dependencies = dep_info_extractor.get_dependencies_from_docker_image(
                docker_driver=self.dockerDriver,
                image_name=image_name,
                temp_dir=temp_dir)
        except Exception as ex:
            message = "Unexpected exception of type {0} occured: {1!r}"\
                .format(type(ex).__name__,  ex.get_message() if type(ex).__name__ == 'DagdaError' else ex.args)
            DagdaLogger.get_logger().error(message)
            data['status'] = message

        # -- Cleanup
        if temp_dir is not None:
            clean_up(temporary_dir=temp_dir)

        # -- Prepare output
        if dependencies is not None:
            data['status'] = 'Completed'
        else:
            dependencies = []

        data['image_name'] = image_name
        data['timestamp'] = datetime.datetime.now().timestamp()
        data['static_analysis'] = self.generate_static_analysis(
            image_name, os_packages, dependencies, malware_binaries)

        # -- Return
        return data
예제 #2
0
    def _threaded_dependencies(dockerDriver, image_name, temp_dir, dependencies):
        # Get programming language dependencies
        if InternalServer.is_debug_logging_enabled():
            DagdaLogger.get_logger().debug('Retrieving dependencies from the docker image ...')

        dependencies.extend(dep_info_extractor.get_dependencies_from_docker_image(docker_driver=dockerDriver,
                                                                                  image_name=image_name,
                                                                                  temp_dir=temp_dir))

        if InternalServer.is_debug_logging_enabled():
            DagdaLogger.get_logger().debug('Dependencies from the docker image retrieved')
예제 #3
0
    def _threaded_dependencies(dockerDriver, image_name, temp_dir, dependencies):
        # Get programming language dependencies
        if InternalServer.is_debug_logging_enabled():
            DagdaLogger.get_logger().debug('Retrieving dependencies from the docker image ...')

        dependencies.extend(dep_info_extractor.get_dependencies_from_docker_image(docker_driver=dockerDriver,
                                                                                  image_name=image_name,
                                                                                  temp_dir=temp_dir))

        if InternalServer.is_debug_logging_enabled():
            DagdaLogger.get_logger().debug('Dependencies from the docker image retrieved')
예제 #4
0
    def evaluate_image(self, image_name, container_id):
        # -- Static analysis
        # Get OS packages
        if image_name:  # Scans the docker image
            os_packages = os_info_extractor.get_soft_from_docker_image(self.dockerDriver, image_name)
        else:  # Scans the docker container
            os_packages = os_info_extractor.get_soft_from_docker_container_id(self.dockerDriver, container_id)
            image_name = self.dockerDriver.get_docker_image_name_from_container_id(container_id)
        # Get programming language dependencies
        dependencies = dep_info_extractor.get_dependencies_from_docker_image(self.dockerDriver, image_name)

        # -- Prepare output
        data = {}
        data['image_name'] = image_name
        data['timestamp'] = datetime.datetime.now().timestamp()
        data['status'] = 'Completed'
        data['static_analysis'] = self.generate_static_analysis(os_packages, dependencies)

        # -- Return
        return data
예제 #5
0
    def evaluate_image(self, image_name, container_id):
        # Init
        data = {}

        # -- Static analysis
        # Get OS packages
        if image_name:  # Scans the docker image
            os_packages = os_info_extractor.get_soft_from_docker_image(
                self.dockerDriver, image_name)
        else:  # Scans the docker container
            os_packages = os_info_extractor.get_soft_from_docker_container_id(
                self.dockerDriver, container_id)
            image_name = self.dockerDriver.get_docker_image_name_by_container_id(
                container_id)
        # Get programming language dependencies
        dependencies = None
        try:
            dependencies = dep_info_extractor.get_dependencies_from_docker_image(
                self.dockerDriver, image_name)
        except Exception as ex:
            message = "Unexpected exception of type {0} occured: {1!r}".format(
                type(ex).__name__, ex.args)
            DagdaLogger.get_logger().error(message)
            data['status'] = message

        # -- Prepare output
        if dependencies is not None:
            data['status'] = 'Completed'
        else:
            dependencies = []

        data['image_name'] = image_name
        data['timestamp'] = datetime.datetime.now().timestamp()
        data['static_analysis'] = self.generate_static_analysis(
            os_packages, dependencies)

        # -- Return
        return data
예제 #6
0
파일: analyzer.py 프로젝트: sachsgiri/dagda
    def evaluate_image(self, image_name, container_id):
        if InternalServer.is_debug_logging_enabled():
            DagdaLogger.get_logger().debug(
                'ENTRY to the method for analyzing a docker image')

        # Init
        data = {}

        # -- Static analysis
        image_name = self.dockerDriver.get_docker_image_name_by_container_id(container_id) if container_id \
                                                                                           else image_name
        os_packages = []
        malware_binaries = []
        dependencies = None
        temp_dir = None
        try:
            # Get OS packages
            if InternalServer.is_debug_logging_enabled():
                DagdaLogger.get_logger().debug(
                    'Retrieving OS packages from the docker image ...')

            if container_id is None:  # Scans the docker image
                os_packages = os_info_extractor.get_soft_from_docker_image(
                    docker_driver=self.dockerDriver, image_name=image_name)
                temp_dir = extract_filesystem_bundle(
                    docker_driver=self.dockerDriver, image_name=image_name)
            else:  # Scans the docker container
                os_packages = os_info_extractor.get_soft_from_docker_container_id(
                    docker_driver=self.dockerDriver, container_id=container_id)
                temp_dir = extract_filesystem_bundle(
                    docker_driver=self.dockerDriver, container_id=container_id)

            if InternalServer.is_debug_logging_enabled():
                DagdaLogger.get_logger().debug(
                    'OS packages from the docker image retrieved')

            # Get malware binaries
            if InternalServer.is_debug_logging_enabled():
                DagdaLogger.get_logger().debug(
                    'Retrieving malware files from the docker image ...')

            malware_binaries = malware_extractor.get_malware_included_in_docker_image(
                docker_driver=self.dockerDriver, temp_dir=temp_dir)

            if InternalServer.is_debug_logging_enabled():
                DagdaLogger.get_logger().debug(
                    'Malware files from the docker image retrieved')

            # Get programming language dependencies
            if InternalServer.is_debug_logging_enabled():
                DagdaLogger.get_logger().debug(
                    'Retrieving dependencies from the docker image ...')

            dependencies = dep_info_extractor.get_dependencies_from_docker_image(
                docker_driver=self.dockerDriver,
                image_name=image_name,
                temp_dir=temp_dir)

            if InternalServer.is_debug_logging_enabled():
                DagdaLogger.get_logger().debug(
                    'Dependencies from the docker image retrieved')

        except Exception as ex:
            message = "Unexpected exception of type {0} occured: {1!r}"\
                .format(type(ex).__name__,  ex.get_message() if type(ex).__name__ == 'DagdaError' else ex.args)
            DagdaLogger.get_logger().error(message)
            if InternalServer.is_debug_logging_enabled():
                traceback.print_exc()
            data['status'] = message

        # -- Cleanup
        if temp_dir is not None:
            clean_up(temporary_dir=temp_dir)

        # -- Prepare output
        if InternalServer.is_debug_logging_enabled():
            DagdaLogger.get_logger().debug('Preparing analysis output ...')

        if dependencies is not None:
            data['status'] = 'Completed'
        else:
            dependencies = []

        data['image_name'] = image_name
        data['timestamp'] = datetime.datetime.now().timestamp()
        data['static_analysis'] = self.generate_static_analysis(
            image_name, os_packages, dependencies, malware_binaries)

        if InternalServer.is_debug_logging_enabled():
            DagdaLogger.get_logger().debug('Analysis output completed')

        # -- Return
        if InternalServer.is_debug_logging_enabled():
            DagdaLogger.get_logger().debug(
                'EXIT from the method for analyzing a docker image')

        return data