This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
deterlab [2017/05/19 15:20] silvio.biagioni@unitn.it [Setup] |
deterlab [2021/01/29 10:58] (current) |
||
---|---|---|---|
Line 9: | Line 9: | ||
- Create groups of students in your class project on DETERLab, one group per attack team. Give to the groups easily related names (e.g., "cctf-exper1-team1") since managing multiple copies of experiment and multiple teams could easily get confusing. | - Create groups of students in your class project on DETERLab, one group per attack team. Give to the groups easily related names (e.g., "cctf-exper1-team1") since managing multiple copies of experiment and multiple teams could easily get confusing. | ||
- Swap in the experiment using the related NS file: <code bash> /share/education/CTF2_USC/ctf2.ns </code> Swap in as many experiments as you have teams. For each experiment, the obtained network template is described in the following picture. {{ :networktopology.png?600 |}} | - Swap in the experiment using the related NS file: <code bash> /share/education/CTF2_USC/ctf2.ns </code> Swap in as many experiments as you have teams. For each experiment, the obtained network template is described in the following picture. {{ :networktopology.png?600 |}} | ||
- | - For each topology created, remove access to the three //client// machines for all but their attack team, and remove access to //server// and //gateway// machine for all but the automated defense team. Remove also the access to //router// for all teams. These steps can be done by running the ''setexpgroups.sh'' script: <code bash>$ ./setexpgroups.sh ProjName expgroups mysql</code> where ''mysql'' is the configuration of the bank service offered by the server, whereas ''expgroups'' is a text file which specifies, by means of its two lines, the names of the experiments and the associated group names. An example the ''expgroups'' file is shown down here. <code>exp1 exp2 | + | - For each topology created, remove access to the three //client// machines for all but their attack team, and remove access to //server// and //gateway// machine for all but the automated defense team. Remove also the access to //router// for all teams. These steps can be done by running the ''setexpgroups.sh'' script: <code bash>$ ./setexpgroups.sh ProjName expgroups mysql</code> where ''mysql'' (contained in the local folder ''setups/'') is the configuration of the bank service offered by the server, whereas ''expgroups'' (contained in the local folder ''groups/'') is a text file which specifies, by means of its two lines, the names of the experiments and the associated group names. An example the ''expgroups'' file is shown down here. <code>exp1 exp2 |
exp1-attack-group exp1-defense-group exp2-attack-group exp2-defense-group </code> | exp1-attack-group exp1-defense-group exp2-attack-group exp2-defense-group </code> | ||