Paper Schedule

Geo

Paper Title

• OAD Modeling– Chapter 1.Introduction ( SAPH)– Chapter 2.Security Modeling Overview– Chapter 3.Comparing Cons and Pros– Chapter 4.OAB Modeling– Chapter 5.ProtoType of OAB Modeling– Chapter 6.Conclusion

Scenario

EngineeringDepartment

AccountingDepartment

DataBaseServer

Router

User: Geo

192.168.1.1/24

E0:192.168.1.254/24

192.168.2.1/24

E1:192.168.2.254/24

Switch_E Switch_A

WWWServer

192.168.2.2/24

Geo001

Demo (1)

Demo (2)

Demo (3)

Demo (4)

Demo (5)

Architecture

• PHP

• MySQL

Resource

• Pens

• Papers

• And one computer.

Paper Schedule

工作 起始日期 結束日期 工作時間Chapter 2

草稿09/20 10/3 2 weeks

Chapter 3

草稿10/4 10/10 1 weeks

Chapter 4 草稿

10/11 11/21 5 weeks

Chapter 1,6 草稿

11/22 12/5 2 weeks

Paper Schedule (cont.)

工作 起始日期 結束日期 工作時間Chapter 5草稿

12/6 12/12 1 week

合併順稿 12/13 12/26 2 weeks

申請學位考試截止日

12/16

初稿完成 (12/26)大修訂 12/27 1/16 3 weeks

編寫投影片 1/17 1/30 2 weeks

Implementation Schedule

工作 起始日期 結束日期 工作時間Specific 09/24 09/27 4 days

Cisco ACL Command Data, Service Type Data

09/28 10/01 5 days

Ciscoacl() 10/2 10/8 1 weeks

Implementation Schedule(cont.)

工作 起始日期 結束日期 工作時間Topology - Component

10/9 10/5 1 weeks

Policy() 10/6 10/19 2 weeks

path() 10/20 11/10 2 weeks

Testing and Debugging

11/11 11/31 3 weeks

Demo Display (1)

My boss wants to let Geo can access only www server in accounting department

Geo001WWW DB

( Policy form data, policy(), component form data)

Demo Display (2)

(List the node of allowed traffic by topology form data or component form)

Geo001 ＞ Switch_E ＞ Branch Router ＞ HQ Route > Switch_A > WWW Server

(component form data, path())

Demo Display (4)

(According the policy to determine the ACL type)

Extend ACL

(service type data, cisco acl command data, ciscoacl())

Demo Display (3)

(Check Object Property and Find Which interfaces are needed)

We need set up policies in interface E0 in Branch Router

E0

(Topology form data, ciscoacl())

Demo Display (5)

ACL in E0 interface of Branch ：

access-list 110 permit tcp host 192.168.1.2 host 192.168.2.2 eq 23

E0

(ciscoacl(), cisco acl command data, service type data)

Demo Display (6)

Finally we get a result ：

An ACL in E0 interface can satisfy our request.