Welcome to DIAS UMFST How To’s documentation!

The current page serves as the official documentation developed by UMFST (University of Medicine, Pharmacy, Science and Technology of Targu Mures), as part of the DIAS (Diagnostic Anti-Tampering Systems) H2020 project.

This documentation is a follow up to Getting Started with Kuksa describing how to install, configure and use, UMFST’s Firewall, Intrusion Detection System, and Secure Logging solutions (in the future), in conjunction with the Kuksa setup described in the previous mentioned link. As the project progresses, the current documentation and source codes used here may suffer changes.

The reader is advised to follow the sections below in sequence, since there are dependencies between a step, and a previous one. For example, the Firewall requires a physical or virtual CAN (Controller Area Network) interface from where it can read CAN frames. Similarly to use the Secure Logging, a physical or virtual TPM (Trusted Platform Module) must be configured.

Contents:

• 1. Introduction
  • 1.1 Requirements
  • 1.1.2 CAN interface
• 2. Firewall and IDS Setup
  • 2.1 Installation
  • 2.2 Helper processes
  • 2.3 Configuration
  • 2.3.1 Firewall/IDS
  • 2.3.2 Pycan
  • 2.3.3 Log Publisher
  • 2.4 Using the services
• 3. Simulation
  • 3.1 Requirements
  • 3.2 Simulating the CAN
  • 3.3 Capturing events
  • 3.4 Manual testing
• 4. Rule language
  • 4.1 Terms and keywords
  • 4.2 State chains
• 5. Cloud Setup
  • 5.1 Requirements
  • 5.2 InfluxDB Setup
  • 5.3 Hono Consumer Setup
  • 5.4 Grafana Setup

Research

Teri Lenard and Roland Bolboaca. 2021. A Statefull Firewall and Intrusion Detection System Enforced with Secure Logging for Controller Area Network. European Interdisciplinary Cybersecurity Conference. Association for Computing Machinery, New York, NY, USA, 39–45. DOI:https://doi.org/10.1145/3487405.3487650

Acknowledgement

This work was funded by the European Union’s Horizon 2020 Research and Innovation Programme through DIAS project under Grant Agreement No. 814951. This document reflects only the author’s view and the Agency is not responsible for any use that may be made of the information it contains

Authors

Authors can be found and contacted on: https://nislab.umfst.ro/