Istlab - User contributions [en]

Tape Drive

2007-12-18T12:51:19Z

Mgogoulos: New page: * Tape driver * Quantity: 1 PV 110T LTO-2 L tape drive (SCSI), 24MB/s, 200GB native, no ctllr, inc 1 cleaning tape European - LTO Documentation with European power cord Adaptec 39320A S...

* Tape driver
* Quantity: 1
PV 110T LTO-2 L tape drive (SCSI), 24MB/s, 200GB native, no ctllr, inc 1
cleaning tape

European - LTO Documentation with European power cord

Adaptec 39320A SCSI Controller Card, no cable (for 9G Servers)

External 4 metre SCSI VHDCI to 68 pin cable

No Yosemite Backup Software

Upg to BASIC 3Y NBD Premier Enterprise Support

Recommended Enterprise Support declined. Basic support with limited HW
support, NBD only

You have chosen not to take the Dell PowerVault installation service
Base warranty

1Y NBD (Next Business Day)

Power Vault Order - Greece

Road Freight Charge Per Unit

20 LTO2 Tape Cartridge, 1-pack, Dell-branded (Kit)
Road Freight Charge S&P (non monitor) 2-10 units

1 LTO Tape Cleaning Cartridge, Dell-branded (KIT)
Road Freight Charge S&P (non monitor) 2-10 units

[[Category:Equipment]]
[[Category:Equipment SENSE]]
[[Category:SENSE]]

Wireless Access Point Router

2007-12-18T12:47:58Z

Mgogoulos: New page: * Wireless Access Point Router * Quantity: 1 * D-LINK DIR635 * Router, nat AP Category:Equipment Category:Equipment SENSE Category:SENSE

* Wireless Access Point Router
* Quantity: 1
* D-LINK DIR635
* Router, nat AP

[[Category:Equipment]]
[[Category:Equipment SENSE]]
[[Category:SENSE]]

Wireless Access Point

2007-12-04T08:40:16Z

Mgogoulos: New page: * Wireless Access Point * Quantity: 1 * Belkin * 20073404Φ32 * No Nat Category:Equipment Category:Equipment SENSE Category:SENSE

* Wireless Access Point
* Quantity: 1
* Belkin
* 20073404Φ32
* No Nat

[[Category:Equipment]]
[[Category:Equipment SENSE]]
[[Category:SENSE]]

GPS Star Navigator

2007-12-04T08:39:20Z

Mgogoulos: New page: * GPS Star Navigator * Quantity: 1 * BT 47-S Q893226 927400943 Category:Equipment Category:Equipment SENSE Category:SENSE

* GPS Star Navigator
* Quantity: 1
* BT 47-S Q893226 927400943

[[Category:Equipment]]
[[Category:Equipment SENSE]]
[[Category:SENSE]]

Microphone

2007-12-04T08:38:39Z

Mgogoulos: New page: * Microphone * Quantity: 1 * Skype/Voip * 3302041321 Category:Equipment Category:Equipment SENSE Category:SENSE

* Microphone
* Quantity: 1
* Skype/Voip
* 3302041321

[[Category:Equipment]]
[[Category:Equipment SENSE]]
[[Category:SENSE]]

SENSE book wishlist

2007-10-23T11:21:21Z

Mgogoulos:

*[http://www.amazon.com/Programming-Python-Prentice-Software-Development/dp/0132354187 Rapid GUI Programming with Python and Qt The Definitive Guide to PyQt Programming]

*Karl Fogel [http://www.amazon.co.uk/Producing-Open-Source-Software-Fogel/dp/0596007590/ref=sr_1_1/203-2032591-8741518?ie=UTF8&s=books&qid=1173340467&sr=8-1 Producing Open Source Software]

*John R. Levine [http://www.amazon.co.uk/Linkers-Kaufmann-Software-Engineering-Programming/dp/1558604960/ref=pd_luc_0180305960075901558604960/203-2032591-8741518 Linkers and Loaders]

*Hans Petter Langtangen [http://www.amazon.co.uk/Python-Scripting-Computational-Science-Engineering/dp/3540294155/ref=pd_ka_1/202-3585720-0642223?ie=UTF8&s=books&qid=1173357421&sr=8-1 Python Scripting for Computational Science]

* Benjamin C. Pierce [http://www.amazon.co.uk/Types-Programming-Languages-Benjamin-Pierce/dp/0262162091/ref=pd_ka_1/202-3585720-0642223?ie=UTF8&s=books&qid=1173375705&sr=8-1 Types and Programming Languages]

* R.W. Hamming [http://www.amazon.co.uk/Numerical-Methods-Scientists-Engineers-Richard/dp/0486652416/ref=sr_1_2/202-3585720-0642223?ie=UTF8&s=books&qid=1173375899&sr=8-2 Numerical Methods for Scientists and Engineers]

* Henry S. Warren Jr. [http://www.amazon.co.uk/Hackers-Delight-Henry-S-Warren/dp/0201914654/ref=sr_1_1/202-3585720-0642223?ie=UTF8&s=books&qid=1173375969&sr=1-1 Hacker's Delight]

* Joel Spolsky. [http://www.amazon.com/Best-Software-Writing-Selected-Introduced/dp/1590595009 The Best Software Writing I]

* Stephen Wilbers. [http://www.amazon.com/Keys-Great-Writing-Stephen-Wilbers/dp/0898799325 Keys to Great Writing]

* Mortimer J. Adler. [http://www.amazon.com/How-Read-Book-Touchstone/dp/0671212095 How to Read a Book]

* Robert Mecklenburg. [http://www.amazon.co.uk/Managing-Projects-Make-Building-Handbooks/dp/0596006101/ Managing Projects with GNU Make]

* Martin Fowler [http://www.amazon.co.uk/Enterprise-Application-Architecture-Addison-Wesley-Signature/dp/0321127420/ Patterns of Enterprise Application Architecture]

* Andres Andreu [http://www.amazon.com/Professional-Pen-Testing-Applications-Programmer/dp/0471789666/ref=pd_sim_b_1/103-9938800-8237415?ie=UTF8&qid=1170769149&sr=1-1 Professional Pen Testing for Web Applications (Programmer to Programmer)]

* Mark G. Graff [http://www.amazon.com/gp/product/0596002424 Secure Coding: Principles and Practices]

* Joel Scambray [http://www.amazon.com/Hacking-Exposed-Web-Applications-Second/dp/0072262990/sr=1-1/qid=1171651524?ie=UTF8&s=books Hacking Exposed Windows, 2nd Ed. (Hacking Exposed)]

* Seth Fogie [http://www.amazon.com/Cross-Site-Scripting-Attacks-Exploits/dp/1597491543/sr=1-1/qid=1170769149?ie=UTF8&s=books Cross Site Scripting Attacks: Xss Exploits and Defense ]

* Kate L. Turabian [http://www.amazon.co.uk/Manual-Writers-Research-Papers-Dissertations/dp/0226823377/ref=sr_1_1/026-8892653-7930013?ie=UTF8&s=books&qid=1184508531&sr=8-1 A Manual for Writers of Research Papers, Theses, and Dissertations]

* William Strunk Jr. and E.B.White [http://www.amazon.co.uk/Elements-Style-William-I-Strunk/dp/020530902X/ref=pd_sim_b_5/026-8892653-7930013?ie=UTF8&qid=1184508531&sr=8-1 The Elements of Style]

* Ronald L. Graham, Donald E. Knuth and Oren Patashnik [http://www.amazon.co.uk/Concrete-Mathematics-Foundation-Computer-Science/dp/0201558025/ref=pd_bbs_sr_1/026-8892653-7930013?ie=UTF8&s=books&qid=1185030033&sr=8-1 Concrete Mathematics: A Foundation for computer science]

* Tom DeMarco and Timothy Lister [http://www.amazon.co.uk/Peopleware-Productive-Projects-Tom-DeMarco/dp/0932633439/ref=pd_bbs_sr_1/202-6651186-7291039?ie=UTF8&s=books&qid=1187972200&sr=8-1 Peopleware: Productive Projects and Teams]

* Adobe Systems Incorporated [http://www.amazon.co.uk/Postscript-Language-Reference-CD-ROM-Systems/dp/0201379228/ref=sr_1_2/202-6651186-7291039?ie=UTF8&s=books&qid=1187972791&sr=1-2 PostScript Language Reference 3rd edition]

* George W. Snedecor and William G. Cochran [http://www.amazon.com/Statistical-Methods-George-W-Snedecor/dp/0813815614/ref=sr_1_1/002-8692953-8561655?ie=UTF8&s=books&qid=1191253322&sr=1-1 Statistical Methods]
[[Category:SENSE]]

Understanding the Linux Kernel

2007-09-03T09:14:17Z

Mgogoulos:

Author: [[:Category:Daniel P. Bovet (book author)| Daniel P. Bovet]]

{{Book}}
[[Category:Book SENSE]]
[[Category:SENSE]]
[[Category:Book SQO-OSS]]
[[Category:Daniel P. Bovet (book author)]]

The Shellcoder's Handbook: Discovering and Exploiting Security Holes

2007-07-22T12:46:54Z

Mgogoulos:

Author: [[:Category:Jack Koziol (book author)| Jack Koziol]]

{{Book}}
[[Category:Book SENSE]]
[[Category:SENSE]]
[[Category:Book SQO-OSS]]
[[Category:Jack Koziol (book author)]]

Understanding the Linux Kernel

2007-06-28T10:29:40Z

Mgogoulos:

Author: [[:Category:Daniel P. Bovet (book author)| Daniel P. Bovet]]

{{Book}}
{{Bookloan|mgogoulos|SENSE}}
[[Category:Book SENSE]]
[[Category:SENSE]]
[[Category:Book SQO-OSS]]
[[Category:Daniel P. Bovet (book author)]]

SENSE book wishlist

2007-06-15T22:35:35Z

Mgogoulos:

*Karl Fogel [http://www.amazon.co.uk/Producing-Open-Source-Software-Fogel/dp/0596007590/ref=sr_1_1/203-2032591-8741518?ie=UTF8&s=books&qid=1173340467&sr=8-1 Producing Open Source Software]

*John R. Levine [http://www.amazon.co.uk/Linkers-Kaufmann-Software-Engineering-Programming/dp/1558604960/ref=pd_luc_0180305960075901558604960/203-2032591-8741518 Linkers and Loaders]

*Hans Petter Langtangen [http://www.amazon.co.uk/Python-Scripting-Computational-Science-Engineering/dp/3540294155/ref=pd_ka_1/202-3585720-0642223?ie=UTF8&s=books&qid=1173357421&sr=8-1 Python Scripting for Computational Science]

* Benjamin C. Pierce [http://www.amazon.co.uk/Types-Programming-Languages-Benjamin-Pierce/dp/0262162091/ref=pd_ka_1/202-3585720-0642223?ie=UTF8&s=books&qid=1173375705&sr=8-1 Types and Programming Languages]

* R.W. Hamming [http://www.amazon.co.uk/Numerical-Methods-Scientists-Engineers-Richard/dp/0486652416/ref=sr_1_2/202-3585720-0642223?ie=UTF8&s=books&qid=1173375899&sr=8-2 Numerical Methods for Scientists and Engineers]

* Henry S. Warren Jr. [http://www.amazon.co.uk/Hackers-Delight-Henry-S-Warren/dp/0201914654/ref=sr_1_1/202-3585720-0642223?ie=UTF8&s=books&qid=1173375969&sr=1-1 Hacker's Delight]

* Joel Spolsky. [http://www.amazon.com/Best-Software-Writing-Selected-Introduced/dp/1590595009 The Best Software Writing I]

* Stephen Wilbers. [http://www.amazon.com/Keys-Great-Writing-Stephen-Wilbers/dp/0898799325 Keys to Great Writing]

* Mortimer J. Adler. [http://www.amazon.com/How-Read-Book-Touchstone/dp/0671212095 How to Read a Book]

* Robert Mecklenburg. [http://www.amazon.co.uk/Managing-Projects-Make-Building-Handbooks/dp/0596006101/ Managing Projects with GNU Make]

* Martin Fowler [http://www.amazon.co.uk/Enterprise-Application-Architecture-Addison-Wesley-Signature/dp/0321127420/ Patterns of Enterprise Application Architecture]

* Andres Andreu
[http://www.amazon.com/Professional-Pen-Testing-Applications-Programmer/dp/0471789666/ref=pd_sim_b_1/103-9938800-8237415?ie=UTF8&qid=1170769149&sr=1-1 Professional Pen Testing for Web Applications (Programmer to Programmer)]

* Mark G. Graff
[http://www.amazon.com/gp/product/0596002424 Secure Coding: Principles and Practices]

* Joel Scambray
[http://www.amazon.com/Hacking-Exposed-Web-Applications-Second/dp/0072262990/sr=1-1/qid=1171651524?ie=UTF8&s=books Hacking Exposed Windows, 2nd Ed. (Hacking Exposed)]

* Seth Fogie
[http://www.amazon.com/Cross-Site-Scripting-Attacks-Exploits/dp/1597491543/sr=1-1/qid=1170769149?ie=UTF8&s=books Cross Site Scripting Attacks: Xss Exploits and Defense ]
[[Category:SENSE]]

FP7: Critical Infrastructure Protection

2007-06-15T08:26:48Z

Mgogoulos:

ideas we have:

'''(i)''' Assume that attacks and breaches are unavoidable; focus on how to
make systems resilient in spite of them. For instance, extend Recovery
Oriented Computing (ROC) ideas to apply to the security infrastructure. What
if instead of a company or country running services on servers, having
them run on virtual machines (cf. what Amazon offers with its EC2
service) that run on farms and can be brought up and down at will? If
something is attacked, we just bring it down and spawn another
pre-configured virtual machine hosting exactly the same services... In
sort, combine virtualisation and ROC for security infrastructure.

Recent moves in security infrastructure could already be interpreted under this light.
DNS root servers have started adopting anycast, in which case traffic from a compromised
server will automatically switch to a standby server via BGP.

Coming back to virtualisation, imagine we have an infrastructure that can host
fully configured services; e.g., an image of a DNS server, or e-mail server, etc.
The server itself runs as an instance of that image. When the image is attacked or
compromised, you just bring up another image. This requires:

* A substrate on which the virtual machines will run
* A way to configure virtual machines and package them, so as to be ready for deployment
* A way to interact with the substrate and the virtual machines in order to control their operation

'''(ii)''' Develop a way to map critical IT infrastructures. The
dependencies are very complex, and therefore you need tools and data
to explore what is really critical. Is Vodafone part of Greece's
critical infrastructure? Linux? Solaris? MS-DOS? Postgres? So we do a
kind of service and artefact dependency analysis, mapping dependencies
and criticality indicators/measures not only software but telecom
links, hardware facilities, etc. We develop the software and then run
a pilot study.

How do we measure criticality? I can come up with two dimensions:

# The amount of infrastructure affected. If we map the infrastructure on a graph, it is clear that some nodes are more central than others. This has been explored at length in scale-free networks research, providing grounding why the internet is vulnerable to targeted attacks.
# The exact effects on the affected infrastructure. A slight performance degradation is not the same as a crash.

In software, it has long since been observed that not all bugs are worth fixing, as they
may never produce a failure. This observations may extend to whole security infrastructures,
and perhaps this is what we are aiming at here?

'''(iii)''' Web applications security is constantly gaining the interest of research community, as the existence of web applications is getting ubiquitous, and new threats to the critical infrastructure are introduced. Ajax security, XSS, CSRF, to name a few, even traditional security people fail to understand and protect against these, or new attack vectors created by the complex nature of web applications. What I see missing is a well defined framework and/or the static analysis tools required to test applications and find vulnerabilities. Discovering and fixing such vulnerabilities is a great move towards more secure infrastructure. (mgogoulos)

''Are you talking about some kind of Web 2.0 Security Infrastructure here?''
Not necessarily, web application security issues affects all web services, but since Web 2.0 technologies are more complicated our work can be valuable to either traditional Web or Web 2.

FP7: Critical Infrastructure Protection

2007-06-13T13:42:13Z

Mgogoulos:

FP7: Critical Infrastructure Protection

2007-06-13T13:38:13Z

Mgogoulos:

FP7: Critical Infrastructure Protection

2007-06-13T13:35:52Z

Mgogoulos:

FP7: Critical Infrastructure Protection

2007-06-13T13:33:18Z

Mgogoulos:

FP7: Critical Infrastructure Protection

2007-06-13T13:32:03Z

Mgogoulos:

Two ideas until now:

'''(i)''' Assume that attacks and breaches are unavoidable; focus on how to
make systems resilient in spite of them. For instance, extend Recovery
Oriented Computing ideas to apply to the security infrastructure. What
if instead of a company or country running services on servers, having
them run on virtual machines (cf. what Amazon offers with its EC2
service) that run on farms and can be brought up and down at will? If
something is attacked, we just bring it down and spawn another
pre-configured virtual machine hosting exactly the same services... In
sort, combine virtualisation and ROC for security infrastructure.

'''(ii)''' Develop a way to map ciritical IT infrastructures. The
dependencies are very complex, and therefore you need tools and data
to explore what is really critical. Is Vodafone part of Greece's
critical infrastructure? Linux? Solaris? MS-DOS? Postgres? So we do a
kind of service and artefact dependency analysis, mapping dependencies
and criticality indicators/measures not only software but telecom
links, hardware facilities, etc. We develop the software and then run
a pilot study.

'''(iii)''' Web applications security is constantly gaining the interest of research community, as the existence of web applications is getting ubiquoutous, and new threats to the critical infrastructure are introduced. Ajax security, XSS, CSRF, to name a few, even traditional security people fail to understand and protect against these, or new attack vectors created by the complex nature of web applications. What I see missing is a well defined framework and/or the static analysis tools required to test applications and find vulnerabilities. Discovering and fixing such vulnerabilities is a great move towards more secure infrastructure. (mgogoulos)

FP7: Critical Infrastructure Protection

2007-06-10T12:26:09Z

Mgogoulos:

== FP7: Critical Infrastructure Protection ==

2 ideas until now:

'''(i)''' Assume that attacks and breaches are unavoidable; focus on how to
make systems resilient in spite of them. For instance, extend Recovery
Oriented Computing ideas to apply to the security infrastructure. What
if instead of a company or country running services on servers, having
them run on virtual machines (cf. what Amazon offers with its EC2
service) that run on farms and can be brought up and down at will? If
something is attacked, we just bring it down and spawn another
pre-configured virtual machine hosting exactly the same services... In
sort, combine virtualisation and ROC for security infrastructure.

'''(ii)''' Develop a way to map ciritical IT infrastructures. The
dependencies are very complex, and therefore you need tools and data
to explore what is really critical. Is Vodafone part of Greece's
critical infrastructure? Linux? Solaris? MS-DOS? Postgres? So we do a
kind of service and artefact dependency analysis, mapping dependencies
and criticality indicators/measures not only software but telecom
links, hardware facilities, etc. We develop the software and then run
a pilot study.

SENSE

2007-06-10T12:21:40Z

Mgogoulos:

== Goodies ==
* [[:Category:Book SENSE|SENSE book library]]; [[SENSE book wishlist]]
* [[:Category:Equipment SENSE|SENSE equipment]]; [[SENSE equipment wishlist]]

== Progress ==
* [[SENSE publication plans]]
* [[SENSE research plans]]
* [[SENSE personal plans]]

== Other ==
* [[Akademy '08 proposal]]
* [[SQO-OSS sprints]]
* [[FP7]]

* [[Category:SENSE]]

Category:Book SENSE

2007-05-10T14:22:51Z

Mgogoulos:

Books in the SENSE library.

{{Bookloan|mgogoulos|SENSE}}
{Book The Shellcoder's Handbook: Discovering and Exploiting Security Holes}}

Category:Book SENSE

2007-05-03T08:55:24Z

Mgogoulos:

Books in the SENSE library.

Category:Book SENSE

2007-04-23T13:04:49Z

Mgogoulos:

Books in the SENSE library.
{{Bookloan|mgogoulos|SENSE}}
{{Book Python Cookbook}}

Tyan-Pepper server

2007-04-18T18:58:10Z

Mgogoulos:

*CPU: 4 x dual core Opteron @ 2.4GHz
*Mem: 16 GB
*Storage: 8x500GB SATA-II @7.2k RPM in RAID-5 and 2x36 GB SATAII @10k RPM in RAID-0
*Admin: [[User:mgogoulos| Markos Gogoulos]]
*SQO-OSS ownership

[[Category:Equipment]]
[[Category:Equipment SQO-OSS]]
[[Category:Equipment SENSE]]
[[Category:SENSE]]

Sun Fire T2000

2007-04-18T18:57:44Z

Mgogoulos:

*CPU: 4-core, 4-thread UltraSPARC T1 @ 1.0 GHz
*Mem: 8GB
*Storage: 2x73GB SAS 10k RPM.
**20GB System partition with UFS
**120GB home partition on ZFS storage pool
*[http://www.sun.com/servers/coolthreads/t2000/ Manufacturer's web page]

*OS: Solaris 10 12/06
*Admin: [[User:mgogoulos| Markos Gogoulos]]
*SQO-OSS ownership

[[Category:Equipment]]
[[Category:Equipment SQO-OSS]]
[[Category:Equipment SENSE]]
[[Category:SENSE]]

Dell PowerEdge 1950

2007-04-18T18:56:28Z

Mgogoulos:

*CPU: 1 x Dual Core Xeon @ 2GHz
*RAM: 2GB
*Storage: 2x146 SAS drives @ 10k RPM

*[http://www1.euro.dell.com/content/products/productdetails.aspx/pedge_1950?c=gr&l=en&s=lca Manufacturer's webpage]
*Admin: [[User:mgogoulos| Markos Gogoulos]]
*SQO-OSS ownership

[[Category:Equipment]]
[[Category:Equipment SQO-OSS]]
[[Category:Equipment SENSE]]
[[Category:SENSE]]

Sun Fire T2000

2007-04-18T18:48:48Z

Mgogoulos:

*CPU: 4-core, 4-thread UltraSPARC T1 @ 1.0 GHz
*Mem: 8GB
*Storage: 2x73GB SAS 10k RPM.
**20GB System partition with UFS
**120GB home partition on ZFS storage pool
*[http://www.sun.com/servers/coolthreads/t2000/ Manufacturer's web page]

*OS: Solaris 10 12/06
*Admin: [[User:mgogoulos| Markos Gogoulos]]

[[Category:Equipment]]
[[Category:Equipment SQO-OSS]]
[[Category:Equipment SENSE]]
[[Category:SENSE]]