PoC - Initial foothold in the CEM

[banzo]

In this first iteration the CEM will be installed on a local workstation.

• A "victim" virtual machine is deployed in the default namespace/VDC, exposing a REST API.
• A "patient zero" virtual machine is deployed in the default namespace and scans the network for services, ports, ... (Kali?)

[ambouhou]

CEM : MiniONE ( https://github.com/OpenNebula/minione) Victim : Ubuntu Server 22.04 (https://ubuntu.com/download/server) Attack : Linux Kali (https://www.kali.org/get-kali/#kali-platforms) (-> At least nmap)

[ambouhou]

Scenario :

• Create serverless Runtime
• DaaS: 'Export Syslog to the Serveur less runtime'
• FaaS: 'Simple analysis of log by the serverless runtime'
• FaaS: 'Dectect dummy anomaly'
• Vacsine (Ansible deploy FW on the vehicle) (- Send log to the SIEM)

[banzo]

Create serverless Runtime: in progress, getting errors (with ipv6 stuff?)

python examples/minimal_offload_sync.py

[2023-12-08 14:58:21,851] [WARNING] [_prov_engine_client.py::54] {'SERVERLESS_RUNTIME': {'NAME': 'Example Serverless Runtime', 'FAAS': {'CPU': 1, 'MEMORY': 768, 'DISK_SIZE': 3072, 'FLAVOUR': 'nature', 'ENDPOINT': ''}, 'SCHEDULING': {}, 'DEVICE_INFO': {}}}
[2023-12-08 14:58:21,851] [WARNING] [_prov_engine_client.py::56] Create [POST] URL: http://cognit-lab.sovereignedge.eu:1337/serverless-runtimes
[2023-12-08 14:58:24,603] [ERROR] [_prov_engine_client.py::65] Provisioning engine returned 500 on create
[2023-12-08 14:58:24,604] [ERROR] [serverless_runtime_context.py::138] Serverless Runtime creation request failed
[2023-12-08 14:58:24,604] [ERROR] [serverless_runtime_context.py::180] Serverless Runtime instance has not been requested yet
[2023-12-08 14:58:25,605] [ERROR] [serverless_runtime_context.py::180] Serverless Runtime instance has not been requested yet
[2023-12-08 14:58:26,606] [ERROR] [serverless_runtime_context.py::180] Serverless Runtime instance has not been requested yet

[ambouhou]

python3.10 examples/minimal_offload_sync.py

[2023-12-12 16:15:47,972] [WARNING] [_prov_engine_client.py::54] {'SERVERLESS_RUNTIME': {'NAME': 'Example Serverless Runtime', 'FAAS': {'CPU': 1, 'MEMORY': 768, 'DISK_SIZE': 3072, 'FLAVOUR': 'nature', 'ENDPOINT': ''}, 'SCHEDULING': {}, 'DEVICE_INFO': {}}}
[2023-12-12 16:15:47,972] [WARNING] [_prov_engine_client.py::56] Create [POST] URL: http://cognit-lab.sovereignedge.eu:1337/serverless-runtimes
Error in config file content: HTTPConnectionPool(host='cognit-lab.sovereignedge.eu', port=1337): Max retries exceeded with url: /serverless-runtimes (Caused by ConnectTimeoutError(<urllib3.connection.HTTPConnection object at 0x1040411e0>, 'Connection to cognit-lab.sovereignedge.eu timed out. (connect timeout=60)'))