[openstack-dev] Fwd: [Neutron] IDSaaS: Request for features

[Mario Tejedor González]

I am copying this email from the openstack general list as I have not got
any responses from there yet. If any of you has a user profile besides
being a developer I would be very interested in your opinion.

Hello, I am a MSc student. I am developing an IDSaaS openstack-plugin for
my project and I would appreciate your opinions on the following:



1.  Do you agree that an IDAaaS plugin would be useful and, if so, what do
you see as the primary benefits to Cloud tenants? I will focus on 1, maybe
2, separate IDS software during my project, but the plugin should be as
software agnostic so drivers for other software can be developed afterwards.



2.  What IDS software would you recommend for this purpose? Specifically I
need to ensure that the plugin accommodates important core features so if
there are vital features please let me know.



3.  What features would you consider to be an important priority when
developing an IDSaaS plugin on openstack?



If you could spare 5 minutes (just five I promise), I have a few more very
short questions in the following survey link:


https://www.surveymonkey.com/s/89BDG72


https://www.surveymonkey.com/s/89BDG72
These survey questions allow you to suggest features you might like to have
in the plugin (Think of it like a request list!). The benefit of this is
that I will prioritize these features for development.

Thank you very much for your time and interest.

--
Mario
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

[openstack-dev] [Neutron] Project Idea: IDS integration.

[Mario Tejedor González]

Hello, Neutron developers.

My name is Mario and I am a Masters student in Networking and Security.

I am considering the possibility of integrating IDS technology to Neutron
as part of my Masters project.
As there are many flavors of open ID[P]S out there and those might follow
different philosophies, my approach would be developing a Neutron plugin
that might cover IDS integration as a service and also a driver (or more,
depending on time constraints) to cover the specifics of an IDS. Following
the nature of Neutron and OpenStack projects these drivers would be
developed for Free and Open Software IDSs and the plugin would be as
vendor-agnostic as possible. In order to achieve that the plugin would have
to deal with the need for logging and alerting.

The time window I have for the development of this project goes from
February to the end of June and I would be able to allocate around 5h a
week to it.

Now, I would like to know your opinion on this idea, given that you know
the project inside out and you are the ones making it happen day after day.
Do you think there is usefulness on bringing that functionality inside the
Neutron project (as a plugin)? I'd prefer do something that contributes to
it rather than a one-shot piece of software that will be stored on a shelf.

I'd like to know if you think that what I am proposing is possible in terms
of time and features or if it seems to be just the delusion of an ignorant.
Do you think the component should also have the capability to change
security-related policies, like load-balancing and firewall rules as to
react to identified threats?

I would appreciate any insight you could give me about this idea, or any
other I could help with instead.

Thank you for your attention,

Mario
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev