440 likes | 549 Views
COMP 523 projects. 26 August 2013. Ryan Thornburg Open Data NC. Tessa nicholas ivi. IVI: Inquire, Visualize, Innovate. Queries and visualizations from a corpus of syllabi Our needs: The front-end interface itself Text mining algorithms to extract metadata from the corpus
E N D
COMP 523 projects 26 August 2013
IVI: Inquire, Visualize, Innovate • Queries and visualizations from a corpus of syllabi Our needs: • The front-end interface itself • Text mining algorithms to extract metadata from the corpus • Visualization algorithms to display results
For more information • http://seeingsyllabi.web.unc.edu – my project blog, for more detail • http://opensyllabus.org – the Open Syllabus Project, the branch that is focusing on building the corpus • http://digitalinnovation.unc.edu/ — the Digital Innovation Lab • Tessa Joseph-Nicholas, Fellow, Digital Innovation Lab, tnicholas@cs.unc.edu
RPSTIR – COMP 523 Option Relying Party Security Technology for Internet Routing Andrew Chi achi@cs.unc.edu August 26, 2012
Agenda • Routing Attacks in the News • BGP in 1 minute • Solution: RPKI • RPSTIR (RPKI validator) • Your mission…
In the News 1997: AS 7007 Internet routing black hole by MAI (US ISP) 2004 TTNet (Turkish ISP) routes most Internet traffic through Turkey 2008 Pakistan Telecom YouTube incident 2010 China Telecom incident
Border Gateway Protocol (BGP) 1 3 6 7 X 3 6 7 X 2 3 6 7 X 6 7 X 7 2 X = 1.2.3/24 6 7 X 4 5 6 7 X 4 5 5 6 7 X NOTE: BGP is complicated. This simplified view highlights the “path vector” aspect, which is relevant to RPKI/BGPSEC.
Border Gateway Protocol (BGP) 1 3 6 7 X 3 6 7 X 1 X 6 7 X 7 2 X = 1.2.3/24 6 7 X 4 5 6 7 X 4 5 5 6 7 X “Address space hijacking”: Autonomous System 1 announces a false advertisement for IP prefix X.
IETF Solution: RPKI + BGPSEC 1 3 3 6 7 X RPKI 6 7 X 2 3 6 7 X 6 7 X 7 2 BGPSEC X = 1.2.3/24 4 5 6 7 X 6 7 X 4 5 5 6 7 X • The IETF approach splits the problem into two domains: origin validation (address space ownership) and path validation (multi-hop routing updates). • Resource PKI: sign the route originations • BGPSEC: sign each hop on the AS-path
Resource Public Key Infrastructure • How do we determine ownership of IP address and Autonomous System (AS) numbers? • Resource Public Key Infrastructure (RPKI) http://xkcd.com/195/
Resource Public Key Infrastructure • Internet Assigned Numbers Authority (IANA) coordinates hierarchical IPv4/IPv6 assignment, through the 5 Regional Internet Registries (RIRs), who then suballocate to ISPs.
Resource Public Key Infrastructure Credit: Geoff Huston, APNIC http://www.cisco.com/web/about/ac123/ac147/archived_issues/ipj_12-1/121_resource.html
RPSTIR (BBN RPKI Validator) This effort by Raytheon BBN Technologies was supported by the U.S. Department of Homeland Security's (DHS) Directorate for Science and Technology.
COMP 523 Task • IPv4 is running out; transfers will increase. But transfers must be cryptographically validated. • You will work with me and the BBN team to implement support for a new Transfer Authorization Object (TAO). • BBN Team: Steve Kent (Chief Scientist), Karen Seo (PM), Dave Mandelberg (Software Lead) • Skills required: • Strong C, MySQL • You will learn and use: • X.509 public key infrastructure • OpenSSL, Cryptlib • BBN ASN.1 Library • git (distributed version control) • Contact: achi@cs.unc.edu
References • IETF Secure Inter-Domain Routing WG docs • http://datatracker.ietf.org/wg/sidr/ • Routing attacks and RPKI in the news • http://www.networkworld.com/news/2010/120710-chinese-internet-traffic-fix.html • http://certification-stats.ripe.net/ • https://labs.ripe.net/Members/fhibler/rpki-capable-routers • BBN RPSTIR software • http://sourceforge.net/projects/rpstir/
Gary bishoptarheel reader testingvisual schedule for autistic adults
Maria ferrisstar taker http://game.mpittman.com/
Even though the Healthy Youth Act of 2009 mandates comprehensive sex ed for all NC middle and high school students, thousands of students in low-resourced schoolslack access to it. MyHealthEd will be an individualized online sexual health curriculum that will give students access to high quality sex ed in school. We plan to pilot MyHealthEd in NC public schools in spring 2014. Join our research team to transform the sexual health outcomes of teens across the state!
Organizing the demand pool for services: Travel between work sites imposes huge transaction costs on service providers. Even with 4 jobs within 15 minutes of their shop ( ) vendors can spend more than an hour on the road. 4 hrs work billed @ $75/hr. 1:20 travel. 36 miles @ $.50/mile = $18.00 $282/5.33 hrs. = $53/hr. effective pay rate. 4 hrs billed @ $60/hr. 0:27 travel. 10.5 miles @ $.50/mile = $5.25. 234.75/4.45 hrs. = $53/hr. effective pay rate.