nmsa / tma-framework-k

Component K - Trustworthiness Monitoring & Assessment Framework

Hi, I’m Nuno,

I am a 38-year-old software engineer working on the development of AppSweep at Guardsquare.

Since 2007, I have been researching, developing and teaching software security, dependability, and reliability engineering.

My research has been helping software engineers to create secure systems through automated tools to find vulnerabilities and attacks, and also by proposing benchmarking approaches to select the best alternatives for their use.

I am expert in code reviews, testing, static analysis, fault injection, vulnerability injection and benchmarking, that I have applied over the years in the assessment of the security and dependability of web and mobile applications, web services, intrusion detection systems, virtualized environments, intelligent systems, and data management systems.

I have applied these techniques in the industry through specialized services, collaboration in international consortia or during secondments of industry-academia projects.

I am always interested in the behavior of technologies used in business-critical scenarios in the presence of attacks and faults. I keep an eye on newly reported vulnerabilities and incidents and I study the advantages/disadvantages that each new famous language/framework brings in terms of security.

• 📫 Reach me at [email protected]

tma-framework-k's Issues

MySQL Docker Image Update

Check for updates to the MySQL Docker image.

Fix MySQL Deployment

Fix MySQL Docker image in deployment file.
The mysql-deployment.yaml file deploys a pod with MySQL 5.6 Docker image.
This image is not correct, because in this repository we build an image with the latest version of MySQL through this Dockerfile.

Integrate the new datamodel with the recipe

Script added in #2

Update the tables to store the quality model and adaptation plan

The metrics/scores related to a quality model should be stored in the database.

Also, if an adaptation is needed, a plan should be stored in the database to be used by the Executor component.

Remove the conn strings from clear text

Add feature to add probe to Admin

Admin allows adding objects to the Knowledge database. It is also needed to add the feature to add a probe to the database.

Create service to return the calculated scores

The following service should be added to the Admin API: /get_scores
Params:

• metricId
• timestamp (initial date where the scores should be returned)

Returns: List of Scores:

{ 
    scores: [
        {
            value: <double>
            resourceId: <integer>
            timestamp: <long>
        }, 
        ...
        {
            value: <double>
            resourceId: <integer>
            timestamp: <long>
        }
    ]
}

The list of scores should be limited to 100 items.

(Issue requested by Dell)

Split Admin Rest into api and web

Create example data

Initial data for:

• Probes
• Resources
• Description

Depends on #2

Relative to: https://github.com/eubr-atmosphere/tma-framework-m/issues/14