February 19, 2015

Learning & Research Resources @ NSU

Dr. George Hsieh

Department of Computer Science

M

Topics

Cisco Networking AcademyNETLAB+Cloud ComputingBig Data

February 19, 2015 Learning & Research Resources @ NSU 2

M

Cisco Networking Academy Local Academy at NSU Online Curricula (https://cisco.netacad.com)

– CCNA Exploration (4 courses)– CCNA Discovery (4 courses)– Introduction to Cybersecurity * New

– Cloud Primer * New

Cisco Packet Tracer (Windows & Ubuntu Linux) CCNA Equipment (Lab)

– Cisco Integrated Service Routers 2811/1841 (9)• Firewall, VPN, IDS/IPS, wireless, VoIP

– Cisco Catalyst 2960 L2 Switches (6) CCNA Equipment / NETLAB+ (Online) * In Progress

February 19, 2015 Learning & Research Resources @ NSU 3

M

NETLAB+ Online Virtual Lab @ NSU (http://199.111.112.16) Example: Network Defense courses in Fall 2014

– Name: CSC-445/745-F14-LabsA– Enrollment: 32 students (14 Graduate & 18 UG)– Total student usage: 1,504 hours * Not counting hours using PCs

Incorporated two lab series for Network Defense courses– CompTIA Security+ Labs v2 (Global)

• Security Plus POD (19) [Standard: non-persistent and dynamic assignment]• Eight virtual machines per POD (Win7, Win2K3, Linux, Free BSD)• Assigned 6 (out of 20) standard labs• Assigned 2 additional custom developed labs

– NETDEFENSE1 (Private)• Network Defense POD (32) [Custom: persistent and fixed assignment]• Added Cisco Packet Tracer and Snort IDS software (Win7)• Assigned 6 custom developed projects (Cisco Firewall, Snort IDS, IPsec)

February 19, 2015 Learning & Research Resources @ NSU 4

M

Cloud Computing and Big Data

NNSA Massie Chair of Excellence in Information Assurance and Cyber Security– NNSA (September 2009 – present) [PI: Dr. Sandra J. DeLoatch]– Research project: Securing Cloud Computing– Design and development of cloud computing infrastructure began in summer

2010

Building a Cloud Computing and Big Data Infrastructure for Cyber Security Research and Education – Army Research Office ($497,725, FEB 2014 – JAN 2015) [PI: George Hsieh]– All equipment purchase and installation completed, and systems operational

Self-Protecting Security for Assured Information Sharing– Army Research Office ($487,228, FEB 2012 – FEB 2015) [PI: George Hsieh]– Research grant provided support for faculty, students, and equipment

February 19, 2015 Learning & Research Resources @ NSU 5

M

Cloud Computing: Teaching & Research

Graduate-level Cloud Computing course– First time offering in Spring 2015 (enrollment: 13)– With strong emphasis in hands-on labs and projects

Graduate student research (since 2010)– 6 for MS Project/Independent Study (4 completed MS Projects)– Publication: Building a Secure Virtual Lab Infrastructure for IT Education (2012 Int’l Conf.

on Frontiers in Education: Computer Science and Computer Engineering, July 2012, Las Vegas, NV)

– Full-spectrum IT projects: research, design, implementation, testing– Build upon previous results while extending capabilities/capacities

Technology platforms– VMware products primarily (free academic licenses)– OpenStack efforts growing (open source)

Private-cloud based virtual lab infrastructure– VMware vCloud Director now, and OpenStack later– Multiple organizations sharing infrastructure resources

February 19, 2015 Learning & Research Resources @ NSU 6

M

Cloud Computing Equipment

February 19, 2015 Learning & Research Resources @ NSU 7

System Function Server #Proc #CoreRAM (GB)

Hard Disk (GB) Qty

Cloud-Production VRTX M620 2 16 256 30,720 4

Subtotal: 8 64 1,024 30,720

Cloud-Integration IBM HS22 7870H5U 2 12 84 4,800 5

Subtotal: 10 60 420 4,800

Cloud-Development

Compute R820 2 16 512 438 1

Storage EqualLogic 0 0 0 7,200 1

Admin T710 2 12 128 2,400 2

Subtotal: 6 40 768 12,438

TOTAL: 24 164 2,212 47,958

M

Big Data Research: Cybersecurity Analysis Progress (since summer 2013)

– 4 faculty/staff members on research team currently– 2 undergraduate and 8 graduate students doing research– 4 graduate & undergraduate students completed capstone research

projects (MS Thesis/Project & BS Seminar)– Hadoop based data analytics for cybersecurity application– Publication: Lessons Learned: Building a Big Data Research and Education

Infrastructure (2014 Int’l Conf. on Advances in Big Data Analytics, July 2014, Las Vegas, NV)

Collaboration– Cyber Analysis, Simulation and Experimentation Environment

• With Old Dominion University/VMASC & Tennessee State University • Include using big data and data analysis to inform M&S operations and

analyze M&S results– Army Training Brain Operating Center (TBOC)

February 19, 2015 Learning & Research Resources @ NSU 8

M

Big Data Equipment

February 19, 2015 Learning & Research Resources @ NSU 9

System Function Server#Pro

c#Cor

eRAM (GB)

Hard Disk (GB) Qty

Hadoop-Production

Master Node

R720xd 2 24 128 3,600 5

Data Node R720xd 2 24 64 24,576 12

Subtotal:  34 408 1,408 312,912 17Hadoop-Integration

M/D NodeR720xd 2 24 128 3,600 5

Subtotal:  10 120 640 18,000 5

TOTAL: 44 528 2,048 330,912 22

M

Big Data Research: Topical AreasCategory Subject Area

Application Domains

Network structure analysisNetwork data analysisIntrusion and anomaly detectionEvent log analysisData analysis and machine learning (R, Octave)

Hadoop Tools

Graph-processing (Giraph)Text search (Solr)Log processing (Flume)Security - access control (Accumulo)Real-time processing (Storm)Lightning-fast cluster computing (Spark)Database (Mongo)Database (Cassandra)Database (HBase)Machine learning (R-Hadoop, MLlib)

February 19, 2015 Learning & Research Resources @ NSU 10