DETER SEER Wiki

The Security Experimentation EnviRonment (SEER) is a set of tools and agents for helping an experimenter setup, script and perform experiments in the DETER environment. It includes agents for traffic generation, attack generation, traffic collection and analysis. There is also a GUI to help run the experiment from your desktop and visualize traffic on the nodes.

A PDF of the wiki documentation can be found here or as a tarfile of HTML files here (Updated at midnight daily).

Software

The most current version is Release 1.2.3 and can be found here. The documentation on the following pages is being updated to reflect this version.

There are two software components to the SEER tools. The desktop GUI and the tarfile that is extracted on experiment nodes. They both can be found in the Download section. Note that the backend tarfiles already exist in DETER on the users files system under /share/seer and do not need to be downloaded. Backends exists for the FC4-STD, FC6-STD, FBSD62-STD and WINXP-UPDATE images.

Before starting, make sure you understand the HOWTO

The current development tree can be checked out at:

• svn co http://seer.isi.deterlab.net:8088/svn/code/trunk

HOWTO

1. HOWTO Setup An Experiment With SEER

Tool Information

1. Use of the GUI tools can be found in GUI
2. Descriptions of traffic generation functions and the scripting interface
3. The variables of the agent modules and their uses can be found below
   1. Topology
   2. Traffic Generators
   3. Attack Generators
   4. Data Processing

Other Information

• The mailing list for SEER questions can be found at http://mailman.isi.edu/mailman/listinfo/deter-workbench

GUI - Webstart

Development