CloudCERT (Testbed framework to exercise critical infrastructure protection)

Transcription

1 WP2. CONCEPTUAL MODELLING AND ARCHITECTURE CloudCERT (Testbed framework to exercise critical infrastructure protection) With the financial support of the Prevention, Preparedness and Consequence Management of Terrorism and other Security-related Risks Programme. European Commission - Directorate-General Justice, Freedom and Security

2 PROJECT CHRONOGRAM WP1 WP2 WP1 Project Management WP3 WP4 WP5 WP6 WP2 Modelling & Architecture. WP3 Information and Communication Standards WP4 Secure Framework Definition. WP5 Platform Development. WP6 Pilot experimentation. WP7 Dissemination. WP7

3 WP2. CONCEPTUAL MODELLING AND ARCHITECTURE OBJETIVE Design the system architecture based on the system conceptual definition of CloudCERT Platform. ACTIVITIES WP2.1 Platform conceptual modelling. DELIVERABLES D3.1 Platform Design document.

4 WP2. 1 Platform conceptual modelling DELIVERABLE D PLATFORM DESIGN DOCUMENT OBJETIVES Base platform model analysis: analysis in depth of the model documentation of the base platform. Platform model adaptation: generating the CloudCERT model document, based on the previous analysis. Base platform architecture analysis: analysis in depth of the architecture documentation of the base platform. Platform architecture adaptation: generating the CloudCERT architecture document, based on the previous analysis.

5 D2.1 Platform Design Document ARCHITECTURE MODEL SERVER CLIENT DATABASE SERVER LDAP SERVER WEB SERVER APPLICATION SERVER WEB BROWSER

6 D2.1 Platform Design Document Logical Model (I) LOGICAL MODEL Web Browser Mobile device USER TIER PRESENTATION TIER LOGIC TIER DATA ACCESS TIER

7 D2.1 Platform Design Document Logical Model (II) USER AND PRESENTATION TIERS Users can use CloudCERT with any device capable to connect the Internet. The information will be shown into the browser using a secure interface to maintain the privacy of contents and users. Web Browser Mobile device USER TIER PRESENTATION TIER 7

8 D3.1 Platform Design Document Logical Model (III) LOGIC TIER (I) Web Services: Web services available within the platform are deployed in AXIS CloudCERT. AXIS is a SOAP implementation developed by Apache and meeting OASIS and W3C standards. Struts: It has been used at level views (JSP's) the following elements of Struts presentation layer: Validators: For the different form fields. Tags-lib's: To facilitate the presentation of different data types. J2EE: The model of the different components of the CloudCERT platform is based on the standard J2EE (Java 2 Enterprise Edition). LOGIC TIER 8

9 D2.1 Platform Design Document Logical Model (IV) LOGIC TIER (II) Spring: It is used (combined with Hibernate) for the persistence of information. The main functionalities are: Storage and retrieval of information Transactionality Jboss: It is used as the application server for hosting J2EE which constitute the CloudCERT platform. CERT Management Console CloudCERT Management Console Web Services Authentication Services Single Sign - on: Central Authentication Service (CAS) Password management module. LOGIC TIER 9

10 D2.1 Platform Design Document Logical Model (V) DATA ACCESS TIER (I) MySQL: Database used to store every application data, including: Information management CloudCERT platform Global data platform Data on management information CloudCERT Audit information Entities level information Entity-specific information. Information content. Translations Information. Status information. DATA ACCESS TIER 10

11 D2.1 Platform Design Document Logical Model (and VI) DATA ACCESS TIER (II) Open LDAP: It manages the Directory (users access control to CloudCERT). It is also used to restrict or allow access (authorization) based on authenticated user role on the different applications or parts of applications. Apache: This is the applications web server. The main features in the project are the following: Request load balancer on the cluster formed by the instances of Application Server (JBoss) Managing secure connections SSL (Secure Sockets Layer) applications. Accommodate and serve the contents of the portals of the CERTs, developed in PHP (PHP Hypertex t Pre-processor). Hibernate: Used to facilitate the storage and retrieval of Java domain objects via object/relational mapping. DATA ACCESS TIER 11

12 D2.1 Platform Design Document MVC Outline User gestures State change View selection Change notification State query 12

13 D2.1 Platform Design Document Functional Design Entity CloudCERT Admin Console Management Supervisor Transport Entity Registration Configuration Moderation Moderation Moderator Moderator Admin Financial Entity Energy Admin CloudCERT User Console Permissions Content Propagation Shared Repository Contents Users Services Public Web site Private repository 13

14 D2.1 Platform Design Document Security Entity CloudCERT Admin Console Entity Registration Permissions Entity Energy Registration DIRECTORY Access Control Supervisor Admin Operation Management Users Users Authentication Authorization Authentication Authorization Moderator Admin Public Web site Access Control Permissions CloudCERT User Console Services Contents 14

15 D2.1 Platform Design Document Overall context design APPLICATION AREA APPLICATION CONTEXT AREA BACK-END AREA 15

16 Thank you. With the financial support of the Prevention, Preparedness and Consequence Management of Terrorism and other Security-related Risks Programme. European Commission - Directorate-General Justice, Freedom and Security