-
Notifications
You must be signed in to change notification settings - Fork 0
/
examples.html
118 lines (104 loc) · 5.34 KB
/
examples.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
<!DOCTYPE HTML>
<!--
Synchronous by TEMPLATED
templated.co @templatedco
Released for free under the Creative Commons Attribution 3.0 license (templated.co/license)
-->
<html>
<head>
<title>Nescio project</title>
<meta http-equiv="content-type" content="text/html; charset=utf-8" />
<meta name="description" content="" />
<meta name="keywords" content="" />
<link href='https://fonts.googleapis.com/css?family=Lato:300,400,700,900' rel='stylesheet' type='text/css'>
<!--[if lte IE 8]><script src="/js/html5shiv.js"></script><![endif]-->
<script src="https://ajax.googleapis.com/ajax/libs/jquery/1.11.0/jquery.min.js"></script>
<script src="/js/skel.min.js"></script>
<script src="/js/skel-panels.min.js"></script>
<script src="/js/init.js"></script>
<noscript>
<link rel="stylesheet" href="/css/skel-noscript.css" />
<link rel="stylesheet" href="/css/style.css" />
</noscript>
<!--[if lte IE 8]><link rel="stylesheet" href="/css/ie/v8.css" /><![endif]-->
<!--[if lte IE 9]><link rel="stylesheet" href="/css/ie/v9.css" /><![endif]-->
</head>
<body class="homepage">
<div id="wrapper">
<!-- Header -->
<div id="header">
<div class="container">
<!-- Logo -->
<div id="logo">
<h1><a href="#">Nescio project</a></h1>
<span>Description and anonymization of Binary Data Formats</span>
</div>
<!-- Nav -->
<nav id="nav">
<ul>
<li><a href="index.html">Homepage</a></li>
<li><a href="bird.html">Bird</a></li>
<li><a href="nescio.html">Nescio</a></li>
<li><a href="usecases.html">Use cases</a></li>
<li class="active"><a href="examples.html">Example</a></li>
<li><a href="installing.html">Installing</a></li>
<li><a href="contact.html">Contact</a></li>
</ul>
</nav>
</div>
</div>
<!-- /Header -->
<div id="page">
<div class="container">
<div class="row">
<div class="12u">
<section id="content" >
<header>
<h2>Example: Anonymizing network traffic</h2>
</header>
<p>
We have captured some network traffic and saved it as a <a href="https://en.wikipedia.org/wiki/Pcap">PCAP</a> file. This traffic includes a variety of different protocols and formats, that lie in the spectrum of the network OSI model. We have UDP, HTTP, HTML, DNS, IP, and so on and so forth.
</p>
<p>
Given this scenario, we want to anonymize the transaction identifier of each DNS header.
</p>
<p><strong>How would we do this using the Nescio infrastructure?</strong>
</p>
<p>
We illustrate this using the Nescio/Bird Eclipse plugin that allows us to edit Bird and Nescio files and generate the appropriate code from them. We first need to develop a Nescio module specifying the anonymization rules. Notice how we do this for the Bird language and for a previously defined TCP_IP specification in Bird.</p>
<p>
<img width="70%" src="images/editing-nescio.png" />
</p>
<p>If the file type checks, an anonymizer class is generated each time the Nescio file is saved:</p>
<p>
<img width="80%" src="images/generated-anonymizer.png" />
</p>
<p>This file can be executed from within eclipse. We have to specify the input data and the name of the file where we will store the anonymized data.</p>
<p>
<img width="80%" src="images/running-anonymizer.png"/>
</p>
<p>We can inspect both files using a network traffic editor. We can see that after running the anonymizer, a new file has been produced. In this file, the IP address belonging to each DNS packet has been indeed anonymized (in this case, by being replaced by zeroes).</p>
<table>
<tr>
<td>
<img width="90%" src="images/original-traffic.png"/>
</td>
<td>
<img width="90%" src="images/anonymized-traffic.png"/>
</td>
</tr>
</table>
</section>
</div>
</div>
</div>
</div>
<!-- Copyright -->
<div id="copyright">
<div class="container">
Design: <a href="http://templated.co">TEMPLATED</a>
</div>
</div>
</div>
</body>
</html>