Orientador: Aílton Akira Shinoda / Resumo: Bastidores eletrônicos de alta performance e disponibilidade utilizam o protocolo Intelligent Platform Management Interface (IPMI) para gerenciar seus dispositivos, controlando e monitorando os recursos disponíveis. Neste contexto para inserir dispositivos com tecnologia mais avançada, novos projetos foram elaborados para atualização dos sistemas de hardware e software baseados em System-on-Chip (SoC), principalmente na área de Física de Alta Energia. Uma aplicação existente, desenvolvida na parceira São Paulo Research and Analysis Center – Fermi National Accelerator Laboratory (SPRACE–FERMILAB) na colaboração internacional do Compact Muon Solenoid detector/Large Hadron Collider/European Organization for Nuclear Research (CMS/LHC/CERN), utiliza o protocolo IPMI implementado em um microcontrolador, contudo, para o processo de atualização vigente, há um interesse desta implementação em SoC. Assim, esta pesquisa foi desenvolvida como o estudo da viabilidade da implementação IPMI em um SoC. Para estabelecer e verificar o protocolo IPMI via barramento I²C, a plataforma Xilinx ZC702 Evaluation Board foi utilizada com os respectivos dispositivos SoC Zynq e Erasable Programmable Memory (EEPROM). Além disso foi desenvolvido uma estrutura simples do IPMI no sistema operacional em tempo real (FreeRTOS) baseados em modelos de hardware e software criados na plataforma Xilinx IDE e SDK. Por meio dos resultados apresentados é possível constatar a viabilidade da implementação IPMI em sistema... (Resumo completo, clicar acesso eletrônico abaixo) / Abstract: High performance and availability electronic racks use the Intelligent Platform Management Interface (IPMI) protocol to manage your devices by controlling and monitoring available resources. In this context to insert devices with more advanced technology, new projects were elaborated to update the System-on-Chip (SoC) based hardware and software systems, mainly in the area of High Energy Physics. An existing application developed at the São Paulo Research and Analysis Center partner - Fermi National Accelerator Laboratory (SPRACE – FERMILAB) in the international collaboration of the Compact Muon Solenoid detector/Large Hadron Collider/European Organization for Nuclear Research (CMS/LHC/CERN) uses The IPMI protocol implemented in a microcontroller, however, for the current update process, there is an interest of this implementation in SoC. Thus, this research was developed as the study of the viability of implementing IPMI in a SoC. To establish and verify the IPMI protocol via I²C bus, the Xilinx ZC702 Evaluation Board platform was used with the respective SoC Zynq and Erasable Programmable Memory (EEPROM) devices. In addition, a simple IPMI framework in the real time operating system (FreeRTOS) based on hardware and software models created on the Xilinx IDE and SDK platform was developed. From the results presented, it is possible to verify the viability of IPMI implementation in systems such as SoC Zynq as platform management controller, which allows migration and further t... (Complete abstract click electronic access below) / Mestre

<p>Larger systems today, like telephone and optical switches, are usually based on a multiboard architecture where a set of printed-circuit boards are connected to a backplane board. These systems are also equipped with Boundary-Scan to enable testing, however, the backplane in a multi-board system has a limited wiring capability, which makes the additional backplane Boundary-Scan wiring highly costly. The problem is to access the Boundary-Scan enabled boards with the Boundary-Scan controller located at a central board. In this MSc. thesis project we propose an approach suitable for the Advanced Telecommunication Computing Architecture (ATCA) standard where we make use of the existing Intelligent Platform Management Bus (IPMB) and expands its protocol for application of Boundary-Scan tests. We have also defined a command set as well as a test data format for storing embedded test data on the boards to support the remote execution of Boundary-Scan tests. For validation of the proposed approach we have developed demonstrator.</p>

Submitted by THIAGO COSTA DE PAIVA null (tecepe@tecepe.eng.br) on 2016-10-20T16:03:30Z No. of bitstreams: 1 2016-tcpaiva-dissertacao-v5.pdf: 15159745 bytes, checksum: 268b17eafe4c1d4d453fb5e731a83466 (MD5) / Approved for entry into archive by Juliano Benedito Ferreira (julianoferreira@reitoria.unesp.br) on 2016-10-26T18:23:11Z (GMT) No. of bitstreams: 1 paiva_tc_me_ilha.pdf: 15159745 bytes, checksum: 268b17eafe4c1d4d453fb5e731a83466 (MD5) / Made available in DSpace on 2016-10-26T18:23:11Z (GMT). No. of bitstreams: 1 paiva_tc_me_ilha.pdf: 15159745 bytes, checksum: 268b17eafe4c1d4d453fb5e731a83466 (MD5) Previous issue date: 2016-09-22 / A especificação Advanced Telecom Computing Architecture (AdvancedTCA) estabelece parâmetros para um bastidor eletrônico de altas perfomance e disponibilidade. Para tanto, grande enfoque é dado nas áreas de controle e monitoramento, o que é feito com o suporte da especificação Intelligent Platform Management Interface (IPMI). Uma das etapas deste trabalho deu-se justamente devido a implementação de um conjunto mínimo e funcional de recursos descritos pela IPMI de forma a adequar o projeto ao contexto em que estava inserido. Em contrapartida, este padrão acaba por restringir o acesso direto de elementos internos ao bastidor e, dessa forma, desenvolvimentos são dificultados quando componentes eletrônicos reprogramáveis são utilizados. Este projeto, então, teve como objetivo a composição de um ambiente de trabalho adequado a este contexto utilizando recursos tradicionais de redes de comunicações. O protocolo Xilinx Virtual Cable (XVC) mostrou-se extremamente conveniente para a situação e fez parte da solução implementada, possibilitando o uso remoto de técnicas de depuração. O ambiente de desenvolvimento final tem se mostrado estável e com boa performance, resmo para conexões entre diferentes continentes, diminuindo custos com viagens e possibilitando a criação de estruturas compartilhadas. / The Advanced Telecom Computing Architecture (AdvancedTCA) specification defines parameters to provide a high performance and high availability environment. Therefore, there is a great focus on control and monitoring, which is achieved with the help of the Intelligent Platform Management Interface (IPMI) specification. One part of this project was devoted to the implementation of a minimal set of IPMI resources required by the context. On the other hand, the AdvacedTCA standard ends up restricting the access to devices inside of the shelf and thus developments on this scenario are hampered when reconfigurable electronic components are present. The goal of this project then was the conception of a suitable development environment using regular network resources. The Xilinx Virtual Cable (XVC) protocol came across as an appropriate tool to the context and is part of the implemented solution, allowing remote debugging techniques to be used. The final development environment is stable and with reasonable performance, even for connections between different continents, reducing travel expenses and facilitating the creation of shared structures.

Orientador: Ailton Akira Shinoda / Resumo: A especificação Advanced Telecom Computing Architecture (AdvancedTCA) estabelece parâmetros para um bastidor eletrônico de altas perfomance e disponibilidade. Para tanto, grande enfoque é dado nas áreas de controle e monitoramento, o que é feito com o suporte da especificação Intelligent Platform Management Interface (IPMI). Uma das etapas deste trabalho deu-se justamente devido a implementação de um conjunto mínimo e funcional de recursos descritos pela IPMI de forma a adequar o projeto ao contexto em que estava inserido. Em contrapartida, este padrão acaba por restringir o acesso direto de elementos internos ao bastidor e, dessa forma, desenvolvimentos são dificultados quando componentes eletrônicos reprogramáveis são utilizados. Este projeto, então, teve como objetivo a composição de um ambiente de trabalho adequado a este contexto utilizando recursos tradicionais de redes de comunicações. O protocolo Xilinx Virtual Cable (XVC) mostrou-se extremamente conveniente para a situação e fez parte da solução implementada, possibilitando o uso remoto de técnicas de depuração. O ambiente de desenvolvimento final tem se mostrado estável e com boa performance, resmo para conexões entre diferentes continentes, diminuindo custos com viagens e possibilitando a criação de estruturas compartilhadas. / Mestre

Larger systems today, like telephone and optical switches, are usually based on a multiboard architecture where a set of printed-circuit boards are connected to a backplane board. These systems are also equipped with Boundary-Scan to enable testing, however, the backplane in a multi-board system has a limited wiring capability, which makes the additional backplane Boundary-Scan wiring highly costly. The problem is to access the Boundary-Scan enabled boards with the Boundary-Scan controller located at a central board. In this MSc. thesis project we propose an approach suitable for the Advanced Telecommunication Computing Architecture (ATCA) standard where we make use of the existing Intelligent Platform Management Bus (IPMB) and expands its protocol for application of Boundary-Scan tests. We have also defined a command set as well as a test data format for storing embedded test data on the boards to support the remote execution of Boundary-Scan tests. For validation of the proposed approach we have developed demonstrator.

Honeypots are systems with the intent of gathering information about potential threats and, at the same time, shifting part of the attention away from the real targets. In industrial control system environments, honeypots play a significant role and can lead to further threat study while distracting potential attackers away from critical physical systems. Low-interaction honeypots are emulated systems that try to recreate a real environment by simulating applications and protocols. These types of honeypots still need improvements to be efficient, and during this thesis work the focus has been on the Conpot open-source ICS honeypot. Due to their nature, low-interaction honeypots are less appealing to potential attackers than high-interaction honeypots since they do not provide the same level of realism and can be easier discovered. Earlier works showed ways to increase the ability to attract more visitors and an improved setup of Conpot has been evaluated. Its results have been analyzed and compared with the default installation. Several advancements have been implemented as well as custom features and working functionalities, such as a customized industrial system design, improved logging, and a web API proxy. The goal of this work is to answer the investigated hypothesis which consists in finding out if an improved version of the low-interaction honeypot can yield more significant results. By evaluating the network traffic received, the outcome has been insightful and showcased a distinguished improvement over the original version of the honeypot. The ICS protocols displayed a more considerable number of interactions along with an increased amount of attacks. In conclusion, further development for the Conpot honeypot is desirable which would largely improve its performance and practicality in real-world deployments. / Honeypots är ett system med avsikten att samla information om potentiella hot och samtidigt avleda uppmärksamheten från de verkliga målen. I industriella kontrollsystemsmiljöer spelar honungskrukor en viktig roll och kan leda till ytterligare hotstudier samtidigt som potentiella angripare distraheras från viktiga fysiska system. Honeypots med låg interaktion är emulerade system som försöker återskapa verkliga miljöer genom att simulera applikationer och protokoll. Dessa typer av honeypots behöver fortfarande förbättringar för att vara effektiva, och under detta examensarbete har fokus legat på Conpot open source ICS honeypots. På grund av designbegränsningar är honeypots med låg interaktion mindre tilltalande för potentiella angripare än honeypots med hög interaktion. Tidigare arbeten har visat sätt att öka möjligheten att locka fler besökare och en förbättrad installation av Conpot har utvärderats och dess resultat har analyserats och jämförts med standardinstallationen. Flera framsteg har implementerats samt anpassade funktioner och fungerande funktioner, såsom en anpassad industriell systemdesign, förbättrad loggning och en webb-API-proxy. Målet med detta arbete är att svara på den undersökta hypotesen som går ut på att ta reda på om en förbättrad version av honungskrukan med låg interaktion kan ge mer signifikanta resultat. Genom att utvärdera den mottagna nätverkstrafiken har resultatet varit insiktsfullt och visat upp en stor förbättring jämfört med den ursprungliga versionen av honeypot. ICS-protokollen visade ett större antal interaktioner tillsammans med en ökad mängd attacker. Sammanfattningsvis är det önskvärt med en vidareutveckling av Conpot honeypot som avsevärt skulle förbättra dess prestanda och praktiska användning i den verkliga världen.