DIMS Project Final Report v 1.0.1

This document (version 1.0.1) is the Final Report for the Distributed Incident Management System (DIMS) project, DHS Contract HSHQDC-13-C-B0013.

• Introduction
  • Project Overview
  • The Value Proposition
• Referenced Documents
• Outcomes
  • Summary of Project Outcomes
  • Ansible Playbooks
  • Trident Portal
  • Pilot Deployment
  • Continuous Integration/Continuous Deployment
  • Install and Build Automation
  • Integrated Tests
  • Python Virtualenv Encapsulation
  • DIMS Dashboard
  • Ingest of STIX Documents
  • Tupelo and Related Host Forensic Tools
  • Software Products and Documentation
• Challenges Encountered
  • Understanding the Tools Being Used
  • Staffing Challenges
  • DNS Challenges
  • Distributed Systems Challenges
  • Software Engineering Challenges
  • External Dependencies and Pacing
  • Testing
• Needed Enhancements
  • Packer and Vagrant Workflow Process
  • Normalization of Kickstart
  • Configuration Management Database
  • Continued Reimplementation and Integration of Services
  • Secrets as a Service
  • Testing and Test Automation
• Recommendations for Follow-on Projects
  • Focus on System Build Automation
  • Standardize Operating Systems
  • Standardize on Virtual Machine Hypervisor
  • Manage Static Config Files Differently than User-controlled Files
  • Robust, Flexible, and Replicable Build Environment
  • Avoid Painting Yourself into a Corner with Versions
  • Budget for System Maintenance
  • Testing
• License
• Appendices
  • STIX Development Libraries
  • Reference Links

Section author: David Dittrich dittrich@u.washington.edu

Copyright © 2017 University of Washington. All rights reserved.