COMP 523 PROJECTS 26 August 2013 RYAN THORNBURG OPEN DATA NC TESSA NICHOLAS IVI IVI: Inquire, Visualize, Innovate • Queries and visualizations from a corpus of syllabi Our needs: • The front-end interface itself • Text mining algorithms to extract metadata from the corpus • Visualization algorithms to display results IVI mockup For more information • http://seeingsyllabi.web.unc.edu – my project blog, for more detail • http://opensyllabus.org – the Open Syllabus Project, the branch that is focusing on building the corpus • http://digitalinnovation.unc.edu/ — the Digital Innovation Lab • Tessa Joseph-Nicholas, Fellow, Digital Innovation Lab, tnicholas@cs.unc.edu ANDREW CHI RPSTIR RPSTIR – COMP 523 Option Relying Party Security Technology for Internet Routing Andrew Chi achi@cs.unc.edu August 26, 2012 Agenda • • • • • Routing Attacks in the News BGP in 1 minute Solution: RPKI RPSTIR (RPKI validator) Your mission… In the News • 1997: AS 7007 Internet routing black hole by MAI (US ISP) • 2004 TTNet (Turkish ISP) routes most Internet traffic through Turkey • 2008 Pakistan Telecom YouTube incident • 2010 China Telecom incident Border Gateway Protocol (BGP) 1 367X 67X 3 2367X 7X 6 2 67X 4567X 4 5 567X NOTE: BGP is complicated. This simplified view highlights the “path vector” aspect, which is relevant to RPKI/BGPSEC. 7 X = 1.2.3/24 Border Gateway Protocol (BGP) 1 367X 67X 3 1X 7X 6 2 67X 4567X 4 5 567X “Address space hijacking”: Autonomous System 1 announces a false advertisement for IP prefix X. 7 X = 1.2.3/24 IETF Solution: RPKI + BGPSEC 1 367X 67X 3 RPKI 2367X 7X 6 2 7 BGPSEC 67X 4567X 4 567X X = 1.2.3/24 5 The IETF approach splits the problem into two domains: origin validation (address space ownership) and path validation (multi-hop routing updates). • Resource PKI: sign the route originations • BGPSEC: sign each hop on the AS-path Resource Public Key Infrastructure • How do we determine ownership of IP address and Autonomous System (AS) numbers? • Resource Public Key Infrastructure (RPKI) http://xkcd.com/195/ Resource Public Key Infrastructure • Internet Assigned Numbers Authority (IANA) coordinates hierarchical IPv4/IPv6 assignment, through the 5 Regional Internet Registries (RIRs), who then suballocate to ISPs. Resource Public Key Infrastructure Credit: Geoff Huston, APNIC http://www.cisco.com/web/about/ac123/ac147/archived_issues/ipj_121/121_resource.html RPSTIR (BBN RPKI Validator) This effort by Raytheon BBN Technologies was supported by the U.S. Department of Homeland Security's (DHS) Directorate for Science and Technology. COMP 523 Task • IPv4 is running out; transfers will increase. But transfers must be cryptographically validated. • You will work with me and the BBN team to implement support for a new Transfer Authorization Object (TAO). • BBN Team: Steve Kent (Chief Scientist), Karen Seo (PM), Dave Mandelberg (Software Lead) • Skills required: – Strong C, MySQL • You will learn and use: – – – – X.509 public key infrastructure OpenSSL, Cryptlib BBN ASN.1 Library git (distributed version control) • Contact: achi@cs.unc.edu References • IETF Secure Inter-Domain Routing WG docs – http://datatracker.ietf.org/wg/sidr/ • Routing attacks and RPKI in the news – http://www.networkworld.com/news/2010/120710-chinese-internet-trafficfix.html – http://certification-stats.ripe.net/ – https://labs.ripe.net/Members/fhibler/rpki-capable-routers • BBN RPSTIR software – http://sourceforge.net/projects/rpstir/ DIANE BRAUNER BEGINNING BRAILLE APP GARY BISHOP TARHEEL READER TESTING VISUAL SCHEDULE FOR AUTISTIC ADULTS MARIA FERRIS STAR TAKER http://game.mpittman.com/ PERCIVAL GUEVERRA WRITING GROUPS TUTOR SCHEDULING LIZ CHEN MYHEALTHED Even though the Healthy Youth Act of 2009 mandates comprehensive sex ed for all NC middle and high school students, thousands of students in low-resourced schools lack access to it. MyHealthEd will be an individualized online sexual health curriculum that will give students access to high quality sex ed in school. We plan to pilot MyHealthEd in NC public schools in spring 2014. Join our research team to transform the sexual health outcomes of teens across the state! SARAH GUIDI GAVIN COOMBS HEALTHY PLACES PRANAV HARAVU UNIFIED CAMPUS Y APP RON CARSON COMPETITIVE INTELLIGENCE TOOL JONATHAN YOUNG ONLINE ACCOUNT ACCESS FOR SAVERS JOHN LITHGOW JONESBOARD The Smart Way to Keep Up With The Joneses Organizing the demand pool for services: Travel between work sites imposes huge transaction costs on service providers. Even with 4 jobs within 15 minutes of their shop ( ) vendors can spend more than an hour on the road. 4 hrs work billed @ $75/hr. 1:20 travel. 36 miles @ $.50/mile = $18.00 $282/5.33 hrs. = $53/hr. effective pay rate. 4 hrs billed @ $60/hr. 0:27 travel. 10.5 miles @ $.50/mile = $5.25. 234.75/4.45 hrs. = $53/hr. effective pay rate. ROCKY GOLDSMITH X-SNAP KEVIN LANNING SYSTEMS ADMINISTRATIVE INITIATIVE CRISTOBAL PALMER GNU MAILMAN TOOLS MATT LEMING CAROLINA MOBILE APP PAVEL KRAJCEVSKI COMPRESSION COMPARISONS JACK SNOEYINK Q/A SITE DAVID STOTTS WEB-BASED TUPLE SPACE NICK JYOTHINAGARAM INDIAN NGOS