Giter Club home page Giter Club logo

edge-security-demo's Introduction

Edge, AI & Security Demo

This repository contains the files and documentation to perform the joint Edge / AI, Security demo developed within OCTO, Emerging Technologies.

The demo consists of an Edge / AI based application. The application streams video content that is processed by tensorflow monitored with the streams rendered onto a master media machine over HTTP.

Each streaming application will be run in an OpenShift pod.

Two OpenShift nodes (virtual machine based) will be present to run the Edge AI pod. Keylime will monitor both OpenShit nodes and all containers running in the pod.

One of the Nodes will be compromised / hacked. When this happens, Keylime will sense the breach. It will then inform the controller to migrate the pod to the second node and will have all containers perform actions to blacklist the compromised node.

The user will experience this as the video feeds continuing service while the pod migrates to a non compromised environment.

edge-security-demo's People

Contributors

ayushambastha avatar font avatar lukehinds avatar mpeters avatar

Stargazers

avatar avatar

Watchers

avatar avatar avatar avatar avatar

Forkers

axelsimon astoycos mpeters ayushambastha font cereallkiller

edge-security-demo's Issues

Kubernetes Setup

Nested deployment of K8s / Open Shift

Start with k8s and openshift if possible.

1 x VM for set up of cluster master
2 x VM for set up of nodes

image

Create k8s cluster that can also have Keylime installed on the hosts

We need a Kubernetes cluster (preferably OCP, but can fall back to K8s on GKE or something similar if needed) where we can run some part of the Keylime infrastructure (registrar, verifier, etc) on the hosts themselves (not running as a container). Other parts of the demo will run as containers (keylime_agent, application pods, etc) but that will be pretty standard.

How do we exploit

We swap out ffmpeg mid while loop of execution.

How do we do this, manually?

Assess using Kubevirt

Problem, IMA does not run in containers (as its not yet name spaced)

We should assess using Kubevirt

Revocation Scripts

We need to decide on what will happen when a machine fails.

We need to design revocation events and develop the scripts.

Possible solutions include:

Shutdown machine that has failed

Terminate connection.

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.