07 · 29

Learning Python via Scapy

t my new job some of the things I need to do is network mapping and interface mapping so we can figure out where potential risk lies within the network. I have been looking for a framework in Ruby that can help me programatically map a network. I thought I found what I need in Scruby. However, it seems like Scruby is not  in development anymore and is really just a proof of concept of Scapy. Recently I saw a post by Chris Gates on the Carnal0wnage blog about exactly what I need. I have also been trying to diversify when it comes to my programming languages and python is first on my list. So I decided to give Scapy a shot. The out of the box network visualization tools in Scapy are amazing (if you get all of the correct dependencies installed). You have multiple choices when it comes to outputs. I don't think I have even begun to scratch the surface of the visualization capabilities of Scapy.  

One of the best things about Scapy is that it allows for low level packet manipulation. For those of us who know and care what tcp flags and ttls are there is a lot of power in Scapy.  The Scapy demo page has a lot of greate demos to go through to get a feel of Scapy. This has helped me get a better feel for pythonesque formatting. So far so good. So if you ever need to craft packets, analyze pcap files or do some network visualization Scapy is the way to go.

07 · 28

Data sorting world record: 1 terabyte, 1 minute — Science Blog

 

Computer scientists from the University of California, San Diego broke “the terabyte barrier” — and a world record — when they sorted more than one terabyte of data (1,000 gigabytes or 1 million megabytes) in just 60 seconds. During this 2010 “Sort Benchmark” competition — the “World Cup of data sorting” — the computer scientists from the UC San Diego Jacobs School of Engineering also tied a world record for fastest data sorting rate. They sorted one trillion data records in 172 minutes — and did so using just a quarter of the computing resources of the other record holder.

Companies looking for trends, efficiencies and other competitive advantages have turned to the kind of heavy duty data sorting that requires the hardware muscle typical of data centers. The Internet has also created many scenarios where data sorting is critical. Advertisements on Facebook pages, custom recommendations on Amazon, and up-to-the-second search results on Google all result from sorting data sets as large as multiple petabytes. A petabyte is 1,000 terabytes.

“If a major corporation wants to run a query across all of their page views or products sold, that can require a sort across a multi-petabyte dataset and one that is growing by many gigabytes every day,” said UC San Diego computer science professor Amin Vahdat, who led the project. “Companies are pushing the limit on how much data they can sort, and how fast. This is data analytics in real time,” explained Vahdat. Better sort technologies are needed, however. In data centers, sorting is often the most pressing bottleneck in many higher-level activities, noted Vahdat who directs the Center for Networked Systems (CNS) at UC San Diego.

The two new world records from UC San Diego are among the 2010 results released recently on http://sortbenchmark.org — a site run by the volunteer computer scientists from industry and academia who manage the competitions. The competitions provide benchmarks for data sorting and an interactive forum for researchers working to improve data sorting techniques.

World Records

The Indy Minute Sort and the Indy Gray Sort are the two data sorting world records the UC San Diego computer scientists won in 2010, the first year they entered the Sort Benchmark competition.

In the Indy Minute Sort, the researchers sorted 1.014 terabytes in one minute — thus breaking the minute barrier for this terabyte sort for the first time.

“We’ve set our research agenda around how to make this better…and also on how to make it more general,” said UC San Diego computer science PhD student Alex Rasmussen, the lead graduate student on the team.

The team also tied the world record for the Indy Gray Sort which measures sort rate per minute per 100 terabytes of data.

“We used one forth the number of computers as the previous record holder to achieve that same sort rate performance — and thus one fourth the energy, and one fourth the cooling and data center real estate,” said George Porter, a Research Scientist at the Center for Networked Systems at UC San Diego. The Center for Networked Systems is an affiliated Center of the California Institute for Telecommunications and Information Technology (Calit2).

 

Both world records are in the Indy category — meaning that the systems were designed around the specific parameters of the Sort Benchmark competition. The team is looking to generalize their results for the “Daytona” competition and for use in the real world.

“Sorting is also an interesting proxy for a whole bunch of other data processing problems. Generally, sorting is a great way to measure how fast you can read a lot of data off a set of disks, do some basic processing on it, shuffle it around a network and write it to another set of disks,” explained Rasmussen. “Sorting puts a lot of stress on the entire input/output subsystem, from the hard drives and the networking hardware to the operating system and application software.”

Balanced Systems

The data sorting challenges the computer scientists took on are quite different from the modest sorting that anyone with off the shelf database software can do by comparing two tables. One of the big differences is that data in terabyte and petabyte sorts is well beyond the memory capacity of the computers doing the sorting.

In creating their heavy duty sorting system, the computer scientists designed for speed and balance. A balanced system is one in which computing resources like memory, storage and network bandwidth are fully utilized and as few resources as possible are wasted.

“Our system shows what’s possible if you pay attention to efficiency — and there is still plenty of room for improvement,” said Vahdat, holder of the SAIC Chair in Engineering in the Department of Computer Science and Engineering at UC San Diego. “We asked ourselves, ‘What does it mean to build a balanced system where we are not wasting any system resources in carrying out high end computation?’” said Vahdat. “If you are idling your processors or not using all your RAM, you’re burning energy and losing efficiency.” For example, memory often uses as much or more energy than processors, but the energy consumed by memory gets less attention.

To break the terabyte barrier for the Indy Minute Sort, the computer science researchers built a system made up of 52 computer nodes. Each node is a commodity server with two quad-core processors, 24 gigabytes (GB) memory and sixteen 500 GB disks — all inter-connected by a Cisco Nexus 5020 switch. Cisco donated the switches as a part of their research engagement with the UC San Diego Center for Networked Systems. The compute cluster is hosted at Calit2.

To win the Indy Gray Sort, the computer science researchers sorted one trillion records in 10,318 seconds (about 172 minutes), yielding their world-record tying data sorting rate of 0.582 terabytes per minute per 100 terabytes of data. The winning sort system is made up of 47 computer nodes similar to those used in the minute sort.

According to wolframalpha.com, 100 terabytes of data is roughly equivalent to 4,000 single-layer Blu-Ray discs, 21,000 single-layer DVDs, 12,000 dual-layer DVDs or 142,248 CDs (assuming CDs are 703 MB).

The roster for TritonSort, the world record breaking sort team:

Alex Rasmussen, Radhika Niranjan Mysore and Michael Conley are computer science graduate students at UC San Diego. Alexander Pucher is a visiting student from Vienna University of Technology. Harsha V. Madhyastha is a postdoctoral researcher in computer science at UC San Diego. George Porter is a Research Scientist at the Center for Networked Systems at UC San Diego. Amin Vahdat holds the SAIC Chair in Engineering in the Department of Computer Science and Engineering and directs the Center for Networked Systems (CNS) at UC San Diego. Learn more about Sort Benchmark at http://sortbenchmark.org/

 

Related posts:

  1. New world record in energy-efficient data processing
  2. Guinness World Records Certifies NASA’s Aircraft Speed Record
  3. Computer scientists scale ‘layer 2′ data center networks to 100,000 ports and beyond
  4. 100-meter sprint world record could go as low as 9.48 seconds
  5. New world record for solar-to-grid conversion efficiency
  •  

  • That is a lot of data in a very short amount of time.I would be interested in seeing the algorithms and system set up they were using.

    06 · 20

    It’s time for the Security Industry to grow up

    It’s time for the Security Industry to grow up. Most of us have been drawn to the security industry because of the fun things we get to do. We like finding problems with security controls and love being paid to break into systems and networks. However, as much fun as those things are information security has become a very important part of businesses and industry. As more and more businesses digitize their business information and assets the more important information security becomes. Whether we like it or not information security is quickly becoming a critical part of the business process.

     In that light it is important for us as information security practitioners to learn more about business processes. I know that it feels great to get a shell on a box. However, that shell might not be attacking a critical business process and therefore is a potential waste of effort. By understanding the underling business processes of the company you are testing you can identify targets that are critical to the business as a whole.

     This approach however, requires an understanding of business processes. A great way to begin to understand general business processes is through education. I know that business classes can be uninteresting and even boring at times.  I will admit that during my education the business classes were the least interesting classes I took. I still can barely remember the content I went over even though I did very well in the class.  Recently I have realized my shortcoming in understanding business processes and have been going back over my business classes’ textbooks. If I take more of a “hackers” view at business processes I can begin to see critical places in the business process of where a successful attack could be critical to the business as a whole.

     There are many obvious targets such as high-level executives, payroll, and data warehousing. However, some targets could be just as critical. Imagine targeting the PR department and having the ability to send out press releases that could immediately damage the businesses’ reputation with their customers. All it takes is one factitious press release going viral and the company’s reputation could be irreparably damaged.

     By understanding the business process we as “security professionals” can begin to see these cracks in them and begin to design stopgaps to protect them. I still believe that the hacker mentality can thrive in a business environment. However, in order to do that we need to grow up, educate ourselves and take our rightful place in the business world.

    I am writing this in hopes to spark a discussion on this topic. If you don't agree with me please feel free to let me know why. I am a firm believer in open, uncensored and frank discussions.

     

    06 · 08

    Western Tracking Institute Tracking Class

     I spent last Saturday at an animal tracking class provided by the Western Tracking Institute. The instructors Rick, Lee and William were top notch and we were able to learn a lot about gaits and animal identification. You have no idea how many ways a rabbit track can present itself. Our Tracking location was very interesting. We spent all day under the 805 and 56 merge underpasses and bridges. The first part of the day was spent under the big overpasses.The overpasses were a great place to see many different types of tracks. The substrate was very soft in places and that allowed us to analyze the gaits and tracks fairly easily. We saw raccoon, skunk, bobcat, deer, opossum and the ever present cottontail tracks.

     The second part of the day was spent under the bridge in the muck. Luckily I brought a pair of rubber boots to keep all of the mud and water at bay. We found some really interesting tracks under the bridge including crawfish, deer, bobcat, a ton of raccoon tracks and a mystery track that no one could identify. In all it was a fun day of tracking even if you could barely hear each other talking over all of the traffic noise. I'm looking forward to the trailing workshop later on this summer and hope to get through the entire curriculum. In all it was a great experience and I highly recommend taking any of the classes offered by the WTI

     

    05 · 12

    Ruby on Rails Tutorial: Learn Rails by Example | by Michael Hartl

    Media_httpwwwrailstut_gceje

    A great tutorial for those who want to learn more about Ruby on Rails. The author helps you set up a good working environment and SCM using git. He also helps you set up a git push to Heroku so you can test out your app on the internet. In all a really good tutorial for people new to Ruby/ Rails.

    04 · 03

    Rep. Hank Johnson Fears Guam May Capsize

    Wow. I'm scared this guy makes and votes on bills that directly affect me.

    02 · 08

    Wow, big time security fail. If Amex really believes this they are fooling themselves.

    Media_http25mediatumb_jsfxv

    I especially like their use of "hacking software". Nothing like a little FUD to start out the week.

    01 · 20

    Fun with the Yoshimoto cube - Boing Boing


    Video demonstration of a variation of the Yoshimoto cube, invented in 1971. Link includes a video on how to make one yourself out of paper, as well as an introduction to the Banach-Tarski paradox ("a pea can be chopped up and reassembled into the Sun").

    Made up of eight interconnected cubes, it’s capable of unfolding itself in a cyclic fashion. That means you could keep folding, or unfolding it, indefinitely.

    In the toy Brocoum’s mom bought him, the cubes were also cut into two identical polyhedra, each capable of forming a Yoshimoto cube containing a hollow space inside with the exact shape of another Yoshimoto cube “open” as as dodecahedron (several other shapes are also possible).

    If that sounded somewhat complicated, the animated GIF on the right may illustrate the miracle of the multiplication of Yoshimoto cubes better. It’s simply that a solid Yoshimoto cube can unfold into two hollow Yoshimoto cubes.

    Folding the Yoshimoto Cube

    Wow this is really cool. Reminds me of a cross between the Rubik's Cube, Rubik's Snake and the Rubik's Rings. I will probably have to get one for the kids.

    01 · 11

    BackTrack Linux 4 is Out!

    Media_httpwwwbacktrac_ihbad

    Bittorrent a copy and keep the seed going.

    01 · 11

    Vote for Barbie to become a Computer Engineer

    Help encourage diversity in the IT workplace. Vote for Barbie to become a Computer Engineer.

    Ian Allison

    I'm a sysadmin and infosec geek that loves linux, open source software, animal tracking and wilderness survival.

    About