Google Summer of Code 2010 - Results

Hi everybody.

In this post i will present the work done by me at GSoC 2010. In resume the work was about improve and integrate Zion, QuickScan, NSE Facilitator and Preferences Windows.

Zion

Zion was the most challenging task, because it involves a complex theory developed by João Paulo Medeiros (thanks for your support).

3 functionalities were developed in Zion (all available in Umit as profiles) :

- OS Detection

- Syn Proxy Detection

- Honeyd Detection

In figure below is shown a Zion OS Detection, done to a host running Windows XP. In this windows is shown the feedback of scan steps, the information about OS running on target host, and the graph of the attractor (fingerprint of OS)

Preferences Windows

Preferences Window was integrated in the new branch, with some changes. To the Preferences Window was added the following options:

Inventory settings:

Mapper (Topology) settings:

Interface Editor options:

NSE settings:

QuickScan

QuickScan was improved, displaying the nmap output of the scan, as we can see in the figure below:

To allow open QuickScan when it's iconified, a shortcut key was added (alt+Q), but it raised a big problem: there isn't direct support in python at linux to listen for key events, when the program window don't has the focus. This problem was solved creating a new keybinder library (umit-keybinder), that uses pyHook [1] for windows, and for unix, a bind for an existing keybind module written in C [2]. The keybinder can be found at umit svn.

NSE Facilitator

The NSE Facilitator branch was integrated in the new branch, and some improvements were made. To facilitate the creation of new NSE scripts, it's now possible to create script templates, and then, use them when creating new scripts, as we can see in figure below:

A new options was added to Script Manager menu, to allow manage the created user templates. All created templates are shown in this windows, and it's possible to edit or delete them. These templates can be created in Script Editor, selecting the option "Save as Template" in File menu.

[1] - pyhook.sourceforge.net

[2] - http://trac.umitproject.org/browser/umit-keybinder/code/bind.c

Umit Summer of Code 2010

I'm pleased to announce the selected students for Umit Summer of Code 2010. This year we had several students applying with really good ideas, and even had some of them working on their proposals before the actual beginning of the USoC. Please, join me welcoming our talented USoC 2010 team:

1. Gunjan Bansal has proposed to work on a NetPID Plugin and integration of our Bluetooth Sniffer into Packet Manipulator. Ganja, as we call him, has already delivered some impressive results even before being accepted officially in our Umit Summer of Code 2010, and that gives him several kudos!
2. Niteesh Kumar is working on a MSC Plugin and integration of our Bluetooth Scanner into Umit Network Scanner. Just ad Ganja, he is already working at full speed with his proposal!
3. Neeraj Gupta is one of our participants of USoC 2009, and this year is back for another round improving Umit Network Scanner. Welcome back Neeraj!
4. Shweta Agrawal is proposing to work on our Network Inventory, by getting it integrated into Umit Network Scanner with improvements. We're anxious to see this comming out, and Shweta is eager to get started.
5. Carlos Eduardo is going to work on an implementation of the Protocol 802.21 for UMPA, just like him we all have being sorely missing this protocol at UMPA, but fortunately he came to our rescue.
6. Francesco Piccino is one of our key contributors. He is the author of Umit Packet Manipulator and worked with us through Google Summer of Code since 2008 and this year is proposing to improve Umit Packet Manipulator as a Umit Summer of Code student. We're glad to have you with us!
7. Luiz Medeiros is proposing to implement Plotstats for Umit Packet Manipulator, and we're sure this is going to be a great adition to one of our most important tools. Luiz has being already around in our community for a long time and we're glad to have him with us in this USoC 2010.
8. Mahesh PM is another successful and talented student from USoC 2009, and we're glad to have him with us once again this year to work on improvements to Umit Network Scanner. Mahesh has impressed us with his good work, and we're sure it won't be different in this Umit Summer of Code.
   

This is our team for Umit Summer of Code 2010, and I'm pretty sure it is a winning one. As a community we're thrilled to have these ultra talented students helping us improve Umit's Open Source Softwares and make life easier for Network Administrators and Developers. Several kudos for all of you, and let the Umit Summer of Code begin!

Umit Summer of Code 2010 - Call for Participants

Umit Summer of Code is our own parallel program to Google Summer of Code. The goal is to have those great projects and students working with us during this summer to create some high quality open source software.

BENEFITS

Unfortunatelly, we don't have any budget to afford the same stippend the Google Summer of Code students will receive from Google. But, we can offer a lot of benefits for all of those who wants to volunteers for our Umit Summer of Code.

• A mentor assigned to conduct and help you throughtout your project. That's the best way to get into Open Source for real, and receive tips and guidelines from folks who already develop successful Open Source software. You're not going to find that experience in any how-to or tutorial in the internet.
  
  
• Your project and your name spreaded along with Umit. Whenever Umit goes, your name and project will go also.
  
  
• Boost your resume. That's something that you can definetly mention in your resume, and will certainly boost it.
  
  
• Experience. You'll get development experience that you'll hardly have somewhere else. You'll face issues on several topics, and will have to provide a high quality software to wide range of users world wide.
  


• Google T-Shirt. One of the most important parts ;-). You'll receive a Google T-Shirt after USoC for your participation and success.
  


• A Bluetooth Dongle for the student that will integrate Bluetooth Sniffer.
  


• Certificate. We'll provide you with an official Umit Project participation certificate, which may even include hours if you think that may help you with your university.
  


• Credits. We'll mention your work and name along with all announcements we'll do for our sponsored students.
  


• Recommendation letter. Through your work, we'll get to know you and we'll certainly be pleased to write you a recomendation letter for whatever purpose you may need. Some students have already benefited from our recomendation letters.
  

More details on our program page: http://trac.umitproject.org/wiki/USoC2010

Everyone is welcome to participate! We'll be receiving proposals until June 19th.

Google Summer of Code 2010 - Announcing our students

As you know, this year Google did some rotation with some open source organization, and let them out of the program in order to receive new orgs. That was the case of Umit Project, that has being around since 2005 (2007 as a mentoring organization) with a very high success rate (over 90%). It hapenned the same to other orgs like Fedora and PHP.

Life is good, and Google helped us with 2 slots to be mentored through Nmap. Although we were dismissed as an Open Source Organization, we're still in and with 2 very talented students to work on Umit development this year. Please, joing me welcoming them:

1. Diogo Pinheiro is a portuguese student that proposed to integrate into our Network Scanner some projects we have developed in the past that never went mainstream. The projects are: NSE Facilitator, Zion and Preferences Window.
2. Kosma Moczek is a polish student that is now going to work on UMPA, our packet manipulation library. His main goal this year is to finish Packet Manipulator + UMPA integration and improve UMPA with new protocols and interfaces.

We're glad to have them with us, and we're looking forward to have these so needed improvements into our repository so we can have them develivered to our users. Special thanks for Google, once again, for this inspired Summer of Code program and all they have being doing for the benefit of the Open Source Community.

Google Summer of Code 2010 Talk in UTM

The talk was scheduled on the 27th of March at University Technology Malaysia (Skudai, Johor). The crowd turnout was a great as they were enthusiastic about the topic at hand. Looking forward to a growing number of local students participating in GSoC 2010. Pictures of the talk are attached below.


                  Introduction about the program by the students


                              Setting up for the presentation


                              The crowd - 1


                              The crowd - 2


Faculty lecturer sharing her thoughts on working throughout students schedules


                              Group photo


.

Umit with Nmap @ Google Summer of Code 2010

This year, Umit Project was not accepted as a mentoring organization for Google Summer of Code as Google folks wanted to renew the participating organizations (several others like Fedora and PHP were turned down this year as we were).

Even though, Adriano Marques is going to be a mentor for Nmap, mentoring projects related to Umit. If you're willing to apply for Umit, do so by sending your proposal to Nmap and indicating that you would like to work for Umit.

We invite all the community to join us this year in our endeavour to develop the best Open Source Network Monitoring Tools ever!

Hurry! Applications deadline is April 9th! Help us spread the flyers!!

Umit SoC 2009 - Results

Hi Everybody,

This year we launched a program similar to Google Summer of Code dubbed Umit Summer of Code. The whole idea is to support all students who would want to contribute to the Umit Project in parallel to Google Summer of Code. The project was had introduced a new concept of a mentor and a co-mentor that is inside the project where students should be comfortable to ask some questions. It had another contributors involved, to be sure that students had support.

We developed the idea early this year and followed through it. The contributions of students were apparent in June.

As we wrap the project for this year, we're still supporting contributors of the program and integrating them. It has been a great first year and we look forward to USoC 2010!

Now the results:

Abhiram Kasina [3]: He is from IIT Kharagpur, India that worked on the Message Sequence Chart (MSC) plugin [1] for PacketManipulator [2]

Plugin is able to create a chart from the packets sent and received between machines. The strength of this project lies in the ability to use a sequence of filters on the packet flow captured. For example, this could only show TCP packets between 192.168.1.31 and 192.168.1.32, involved in a 3-way handshake. These charts can be saved as png/svg images for further use. The source code can be found in MSC svn branch [5].



Mahesh PM [4] : He is a student from Thiruvalla, India working on a transversal area in Umit Project. The major part of his work was developing a Test Suite for Umit Network Scanner. He developed test cases for part of core files, and fixing couple of bugs in Network Scanner. The test suite code can be found in UmitTestSuite branch [6].
He also did a Slax live distribution based with Umit tools installed.

Another students still working: We have another two students: Neeraj Gupta, from India and João Pedro Lemos, from Brasil working in the program. He didn't finish the project yet, but they are still working on it. Actually Neeraj is working on NVDB parser and a plugin for discover web contents for Umit Network Scanner. João Pedro Lemos is working on Umit packing in Fedora and RPM based distros.

Thanks for the guys that make it possible!

Stay tunned!

[1] - http://trac.umitproject.org/wiki/MessageSequenceCharts
[2] - http://trac.umitproject.org/wiki/PacketManipulator
[3] - http://trac.umitproject.org/wiki/AbhiramKasina
[4] - http://trac.umitproject.org/wiki/MaheshPM
[5] - http://svn.umitproject.org/svnroot/umit/branch/MSC
[6] - http://svn.umitproject.org/svnroot/umit/branch/UmitTestSuite

Google SoC Mentor Summit 2009

Greetings,

We arrived in San Francisco International Airport(SFO) on Wednesday night and almost lost our way to meet each other after our grueling flights. We stayed around the airport for the night and planned for our visit to San Francisco on the next day. We had a blast visiting spots like the Golden Gate Bridge, downtown San Francisco and Fisherman's Wharf.

Finally Friday came and we departed from downtown to Mountain View. We took the BART then exchanged to a Caltrain line which was marred with adventures. We met someone with a GSoC T-Shirt, a Polish guy, Tomasz Kosiak, from Tcl/Tk. The shirt had an aura for the attendees when we met other GSoC folks from Git and Drupal where we boarded the train and talked about the summit and activities to divulge around. The train stopped at Sunny Vale and we took a cab to meet the folks of the open source world!

We met a lot of guys during the dinner and it was a awesome night, with awesome *geek* talks. :)

The Mentor Summit is a two day event over the weekend where every participants are exposed talks and are allowed to propose an hour long talk which would be voted by the masses if its interesting enough to be slotted into the summit. The talks would span throughout the event.

After the breakfast in Googleplex, we went up to the second floor to propose our talk on "Customizing GSoC" which was scheduled it at 4pm on Saturday.

In the summit kickoff talk, we met Fyodor, from the Nmap Project. Right after that, we attended several talks on Security and finer points of the GSoC program where it was highly interactive and enlightening to a point.



We receive a GSoC Mentoring Guide that you can be found there. The guide was done at a blazing speed so good job folks!

Our talk on "Customizing GSoC" was a good hour discussing ways to improve and customize GSoC. It's great to see Ellen Ko sharing our view and she had given a talk about it at the Atlanta Linux Fest. We shared our experiences on Umit SoC and detailed our approach.



Some important points that we'd like share with you guys:

- Create a comprehensive developer guide based with insights from developers and students
- Keep up USoC and improve the best we can
- Open Source rocks!


Cheers,
Luís and Devtar

Umit Project in BarcampPT

Hi Everybody!

BarCamp[1] is an open event where participants can share some context with others and make social networking. Portuguese guys realized also the event, during this weekend in Coimbra, named BarcampPT[2].

It was a very nice event, beginning with all guys making a shortest personal presentation following the Half-Baked and some talks. And Sunday was a great day with lot of "talks" including the Umit Project presentation [3].



The presentation have a goal: spread Umit Project for audience.

[1] - http://en.wikipedia.org/wiki/BarCamp
[2] - http://www.barcamppt.org
[3] - http://www.slideshare.net/bastiao/umit-presentation

Google Summer of Code 2009 Results

Please, join us congratulating all of our GSoC students for 2009! This year we had 5 students sponsored by Google, and all of them succeeded in their projects this year. Here is a brief description of their projects, and what they had accomplished with Google's stippend.

1. Quick Scan (Daniel Cassiano) - This project's goal is to offer the fastest way to run scans in the network. To use it, just hit a key stroke, and start typing the scan query and the results will appear on the fly. If you need more details, just open Umit to see it from there.
   
2. Zion (João Paulo Medeiros) - Zion is a project that aims discover operating systems (OS fingerprinting) and network security systems through the network using a new methodology created by João Paulo Medeiros.
3. Bluetooth Sniffer (Shu Yang Quek) - Bluetooth Sniffing capabilities for the masses: the goal is to offer sniffing capabilities through our software using regular buetooth dongles. No special hardware needed.
   
4. UMPA Improvements (Bartosz Skowron) - Bartosz came once again this year to improve his project by implementing features like packets receiving capabilities, asynchronous scheduler and template system.
   
5. Audits Framework (Francesco Piccinno) - A general framework to create general attacks, with the help of UmitPlugins infrastructure, XML and schema files and Python language. The project also includes a complete set of common attacks, with point and click and pwn semantic.

Congratulations you all for your huge success this year!

We have also some other folks working on our parallel Umit Summer of Code 2009 program, and they're also doing great! Stay tunned for news about them!