Qualys (Open Source)

This module is a wrapper for connecting and using the QualysGuard API for all Qualys partners. It will take care of authentication and creating the correct uri based on the options provided and the selected API script. Using the Qualys (specifically QualysGuard) API one can integrate QualysGuard into individual appplications using perl. The QualysGuard partners can access security auditing, network discovery, preferences, remediation ticket updates, and user enrollment functions using this interface.

This project has become an open source project under CPAN

Current Website:http://search.cpan.org/~apersaud/Qualys/Qualys.pm


Nmap-Parser (Open Source)

This module implements a interface to the information contained in an nmap scan. It is implemented by parsing the xml scan data that is generated by nmap. This will enable anyone who utilizes nmap to quickly create fast and robust security scripts that utilize the powerful port scanning abilities of nmap.

This project has become an open source project under sourceforge.net

Current Website: http://www.nmapparser.com


Crypt-BabyRijin (Baby AES Implementation)

This is a pure PERL implementation of a scaled down version of AES (Rijndael). The input to the encryption algorithm is a 16-bit hex block, and a 16-bit hex key. The output is a 16-bit cipher block. All the blocks input as hex string such as: input = '4ffe', key = '9ac3' and output ``d3db''. This variation of Rijndael is based by the design of Dr. Clifford Bergman. This module was written for my Cryptography class at Iowa State University.

Crypt-BabyRijin Documentation


Sentinel System Scanner

Unauthorized or monitored services introduce new vulnerabilities into all types of networks. To manage the security and company policy of a given location, one must implement a policy verification system to have a mechanism to make sure the policy is enforced. The Sentinel program that was developed in this project for the Information System Security course, will scan through all the machines on a given network and compare the services that they are running against the security policy of that area. Sentinel will then report these non-compliant machines.


Nessus-Cron  

Nessus-Cron is a vulnerability scanning and reporting system. It is a robust application written in PERL that wraps three main tools for automated compliance monitoring for corporate data centers. It runs against a data center, mapping the network, fingerprinting the OS of all the machines it finds, then it runs vulnerability checks against these boxes which are defined by a given policy, and reports the vulnerabilities of each machine to the corresponding owner informing them of the problem found on the mahcine and a possible solution or fix.


Power-IP Network Management System

PowerIP is a real-time web-based solution to IP management. It stores, tracks and updates user informaion on corporate networks through the web. It also updates DNS in real-time when changes to the database have been made. It is an open source solution to IP management and tracking in corporate networks.

PowerIP Network Management System won the BEST PROJECT AWARD, which is given to the most outstanding project and team in the Software Engineering competition. The award is given by the Department of Computer Science and The Chair of the IEEE.

Today’s world requires vast amounts of communications. The network infrastructure of information grows extremely rapidly day by day. Corporations require hiring Information Technology experts to manage their information and communication in their corporation. Administrating IP addresses in a corporate environment where hundred or thousands of machines are connected to one main infrastructure can be a hassle even through the use of DHCP. In prospect of aiding the IT staff in a networking environment, we have developed a web-based solution to track IP ownership of each client in the corporate environment. We introduce PowerIP.

In most corporate networking environments, tracking the network usage per user is vital to keeping an efficient network. In order to monitor this network performance, IP addresses must be kept and linked to individual users. If a firewall sees that there is some IP address that is communicating on ports 1213, we can deduce that this IP might be using some type of file-sharing software. Since we know the IP from the firewall data, we can match this IP to the database to gather information about the machine. We can then place a packet-sniffer and/or network monitoring devices (RMONS) to monitor the machine since we know find out the physical location of the IP.

The network IDS is able to monitor the network for different types of attacks that might compromise or damage a system. If it detects some type of worm or virus that might start spreading through the network to the other client machines, it will send a message to the IT personnel about this critical problem. The IDS system could also be built to get information from the PowerIP database and find the physical location and name of the user whose machine has been compromised or infected. This would enable IT personnel to disconnect the machine from the switches and routers and isolate the problem and keep it from spreading.


Bezout on ti-92 and ti-89

Using the Texas Instrument calculator programming language, I wrote the bezout(a,b) function to perform enable fast calcuations of bezout integers. Given integers a and b, one can find the integers s and t such that:

a*s + b*t = gcd(a,b) where a-1 = s mod b and b-1 = t mod a

Powermod on ti-92 and ti-89

Using Texas Instrument calculator programming language, I wrote the powermod(a,k,n) function to perform calculations of high power numbers to a given modulus. These types of calculations are used when performing RSA and DSS cryptographic calculations. In other words, with a programmable TI calculator, you can perform:

3648523522669475 mod 970582 = 825867

This program was developed on my spare time in order to help perform cryptographic calculations on a TI calculator for use in Cryptography classes. The code is now being used by Dr. Clifford Bergman to use in his classes to make the exams and homework assignments more 'interesting'.


Cypost (event Posting System)

CyPost is a online interactive community bulletin-board like applicaton. It is meant to be a one-stop place for people at Iowa State to know about events on and off campus. Anyone can promote their own event on this application. It can handle various group permissions so that only authorized users can view information about particular private events.

The financial model of the web-site is to charge companies who wish to advertise with us on the site.


PHP Software Application Support Framework

The objective of this project is to complete a software framework in which the above three applications and other future application may operate. This framework will include a library of functions to be used by or in conjunction with the applications. Examples of the library functions include login authentication, record keeping, graphical displays, and problem creation. Application support and documentation are critical parts of the project.

 
Website Design by: Anthony G Persaud