The current project stores the source code of the Statefull Firewall/Intrusion Detection System developed by Nislab from University of Medicine, Pharmacy, Science and Technology of Targu Mures, as part of the Horizon2020 DIAS Project.
The following dependencies must be installed in order to build the dias-firewall:
sudo apt install g++ libexpat-dev libconfig-dev
and for utils:
sudo apt install can-utils
pip3 install python-can
Firewall log file should be placed in /var/log/dias-firewall/dfw.log The named piped used by the Firewall to receive can messages from pycan_recv.py script should be located in /tmp/canfw_pipe, and the pipe used to communicate with the logging unit is located in /tmp/fwtpm_pipe.
The build script build.sh is used to compile the current project. Use:
./build.sh core
to compile the solution
./build.sh tests
to compile the test file, and
./build.sh clean
to remove the Build directory.
Once the core is compiled, the following directory structure will be generated inside the build directory:
├── Bin
│ ├── // _Binary files_
├── DiasFirewall // Executable
└── Lib
└── libfwcore.so // Shared library
Teri Lenard and Roland Bolboaca. 2021. A Statefull Firewall and Intrusion Detection System Enforced with Secure Logging for Controller Area Network. European Interdisciplinary Cybersecurity Conference. Association for Computing Machinery, New York, NY, USA, 39–45. https://doi.org/10.1145/3487405.3487650
This work was funded by the European Union’s Horizon 2020 Re-search and Innovation Programme through DIAS project under Grant Agreement No. 814951. This documentreflects only the author’s view and the Agency is not responsiblefor any use that may be made of the information it contains