Ph.D. Research Proposal

Total Page:16

File Type:pdf, Size:1020Kb

Ph.D. Research Proposal Masters in Informatics Engineering Internship Final Report Development of Corporate Collaboration Functionalities for Communication Services João Miguel Montenegro dos Santos Barroso Penetra [email protected] DEI Supervisor: Prof. Dr. Fernando Barros Wit-Software Supervisor: Eng. Paulo Sousa Date: 4th September 2013 Development of Corporate Collaboration Functionalities for Communication Services ii Development of Corporate Collaboration Functionalities for Communication Services Abstract Nowadays, due to globalization, increase of competitiveness and organizational structure, people are required to move around the globe in order to achieve their goals. The need to commute is based on the necessity to meet with collaborators, clients, prospect clients or any other person that is on a different location. Since this need for travelling consumes a large amount of money and time resources, it is necessary to find an alternative that allows people to meet and collaborate anywhere. Consequently, this internship attempts to overcome this collaboration need with two prototypes. The first one is a Web Application that is interoperable with other types of devices in order to maximize the opportunity to collaborate. Although it is not possible to implement all functionalities in every type of device, joining a video conference from a cell phone only with audio is still more valuable than not joining at all. The only way of making all of this possible is using a mature architecture such as the IP Multimedia Subsystem. The second one is an Android Application capable of communicating with XMPP Networks. Keywords “Android”; “Audio Calls”, “Business Collaboration Service”, “Conference Calls”, “Instant Messaging”, “IP Multimedia Subsystem”, “File Transfer”, “SIP”, “Video Calls”, “Web Browser”, “XMPP” iii Development of Corporate Collaboration Functionalities for Communication Services iv Development of Corporate Collaboration Functionalities for Communication Services Table of Contents Abstract ................................................................................................................................................. 3 Keywords .............................................................................................................................................. 3 Table of Contents ................................................................................................................................ 5 Index of Figures ................................................................................................................................... 7 Index of Tables .................................................................................................................................... 9 Acronyms ............................................................................................................................................ 11 Section 1 - Introduction ...................................................................................................................... 1 1.1. Internship Presentation ..........................................................................................................................1 Section 2 - Collaboration Service ...................................................................................................... 5 2.1. State of the Art .........................................................................................................................................5 2.2. Platform Design .................................................................................................................................... 13 2.3. Implementation ..................................................................................................................................... 27 2.4. Quality Assurance ................................................................................................................................. 31 2.5. Work Accomplished ............................................................................................................................. 35 Section 3 - Android XMPP Client ................................................................................................... 37 3.1. State of the Art ...................................................................................................................................... 37 3.2. Platform Design .................................................................................................................................... 39 3.3. Implementation ..................................................................................................................................... 47 3.4. Quality Assurance ................................................................................................................................. 51 3.5. Work Accomplished ............................................................................................................................. 51 Section 4 - Methodology ................................................................................................................... 53 4.1. Scrum ...................................................................................................................................................... 53 4.2. Artifacts .................................................................................................................................................. 53 4.3. Team ....................................................................................................................................................... 53 4.4. Events ..................................................................................................................................................... 53 4.5. Implemented Methodology ................................................................................................................. 54 4.6. First Semester Work ............................................................................................................................. 55 4.7. Second Semester Initial Plan ............................................................................................................... 56 4.8. Second Semester Final Plan ................................................................................................................ 57 Section 5 - Conclusions..................................................................................................................... 59 5.1. Future Work .......................................................................................................................................... 59 Section 6 - References ....................................................................................................................... 60 v Development of Corporate Collaboration Functionalities for Communication Services vi Development of Corporate Collaboration Functionalities for Communication Services Index of Figures Figure 1 - Collaboration Service Architecture ............................................................................... 19 Figure 2 - OpenIMSCore Component Diagram ........................................................................... 20 Figure 3 - Collaboration Service - WCAS Architecture ............................................................... 21 Figure 4 - Collaboration Service - Web Browser Client Architecture ........................................ 22 Figure 5 - Collaboration Service - Client Library - Modules Description ................................. 23 Figure 6 - Collaboration Service - User Interface flow for Login .............................................. 24 Figure 7 - Collaboration Service - Session Growth ...................................................................... 32 Figure 8 - Collaboration Service - CPU Utilization ...................................................................... 33 Figure 9 - Collaboration Service - Memory Consumption .......................................................... 33 Figure 10 - Collaboration Service - One to One Chat ................................................................. 35 Figure 11 – Collaboration Service – One to One Audio Call ..................................................... 36 Figure 12 - Collaboration Service - Project Chat .......................................................................... 36 Figure 13 - Android XMPP Client - High-Level Architecture.................................................... 41 Figure 14 - Android XMPP Client - Client Architecture ............................................................. 41 Figure 15 - Android XMPP Client – Client Library Architecture .............................................. 42 Figure 16 - Android XMPP Client - Package Diagram ................................................................ 44 Figure 17 - Android XMPP Client - Registration Sequence Diagram ....................................... 46 Figure 18 - Android XMPP Library - Registration State Machine Diagram ............................. 47 Figure 19 - Android XMPP Client - Client Library Class Diagram ........................................... 48 Figure 20 - Android XMPP Client - Contact List Class Diagram .............................................. 49 Figure 21 - Android XMPP Client - Application outcome ......................................................... 51 vii Development of Corporate Collaboration Functionalities
Recommended publications
  • Uila Supported Apps
    Uila Supported Applications and Protocols updated Oct 2020 Application/Protocol Name Full Description 01net.com 01net website, a French high-tech news site. 050 plus is a Japanese embedded smartphone application dedicated to 050 plus audio-conferencing. 0zz0.com 0zz0 is an online solution to store, send and share files 10050.net China Railcom group web portal. This protocol plug-in classifies the http traffic to the host 10086.cn. It also 10086.cn classifies the ssl traffic to the Common Name 10086.cn. 104.com Web site dedicated to job research. 1111.com.tw Website dedicated to job research in Taiwan. 114la.com Chinese web portal operated by YLMF Computer Technology Co. Chinese cloud storing system of the 115 website. It is operated by YLMF 115.com Computer Technology Co. 118114.cn Chinese booking and reservation portal. 11st.co.kr Korean shopping website 11st. It is operated by SK Planet Co. 1337x.org Bittorrent tracker search engine 139mail 139mail is a chinese webmail powered by China Mobile. 15min.lt Lithuanian news portal Chinese web portal 163. It is operated by NetEase, a company which 163.com pioneered the development of Internet in China. 17173.com Website distributing Chinese games. 17u.com Chinese online travel booking website. 20 minutes is a free, daily newspaper available in France, Spain and 20minutes Switzerland. This plugin classifies websites. 24h.com.vn Vietnamese news portal 24ora.com Aruban news portal 24sata.hr Croatian news portal 24SevenOffice 24SevenOffice is a web-based Enterprise resource planning (ERP) systems. 24ur.com Slovenian news portal 2ch.net Japanese adult videos web site 2Shared 2shared is an online space for sharing and storage.
    [Show full text]
  • Webrtc and XMPP
    webRTC and XMPP Philipp Hancke, XMPP Summit 2013 What is this webRTC thing … …and why should XMPP developers care? . I assume you know what XMPP is… . … you might have heard of Jingle . the XMPP framework for establishing P2P sessions . used for VoIP, filesharing, … . … you might have also heard about this webRTC thing . doing VoIP in the browser . without plugins . „no more flash“ . Do you want to know how it relates to XMPP ? Philipp Hancke © ESTOS GmbH 2013 2 What is webRTC? . P2P sessions between browsers . no servers involved in media transfer . using open standards . Javascript API in the browser . also an BSD-licensed C++ library from Google . Want to know more? . Listen to the evangelists! . Justin Uberti http://www.youtube.com/watch?v=E8C8ouiXHHk . Jose de Castro http://vimeo.com/52510068 . Cullen Jennings http://vimeo.com/cullenfluffyjennings/rtcwebexplained Philipp Hancke © ESTOS GmbH 2013 3 Initiating P2P sessions . initiate a P2P session between two browsers . negotiate media codecs, NAT traversal, etc . media is sent P2P . you need a session initiation protocol . SIP? . JSEP? . H.323? . Jingle! . webRTC does not mandate a signalling protocol . WG decision Philipp Hancke © ESTOS GmbH 2013 4 Call Flow - JSEP Philipp Hancke © ESTOS GmbH 2013 5 Jingle . You can use Jingle as signalling protocol . together with BOSH or XMPP over websockets in the browser . Demo later . But… . webRTC uses the Session Description Protocol as an API . Jingle does not use SDP . You need a mapping SDP -> Jingle -> SDP . Complicated, but doable . Topic for breakout Philipp Hancke © ESTOS GmbH 2013 6 Call Flow - Jingle Philipp Hancke © ESTOS GmbH 2013 7 webRTC-Jingle usecases .
    [Show full text]
  • Universidad Pol Facultad D Trabajo
    UNIVERSIDAD POLITÉCNICA DE MADRID FACULTAD DE INFORMÁTICA TRABAJO FINAL DE CARRERA ESTUDIO DEL PROTOCOLO XMPP DE MESAJERÍA ISTATÁEA, DE SUS ATECEDETES, Y DE SUS APLICACIOES CIVILES Y MILITARES Autor: José Carlos Díaz García Tutor: Rafael Martínez Olalla Madrid, Septiembre de 2008 2 A mis padres, Francisco y Pilar, que me empujaron siempre a terminar esta licenciatura y que tanto me han enseñado sobre la vida A mis abuelos (q.e.p.d.) A mi hijo icolás, que me ha dejado terminar este trabajo a pesar de robarle su tiempo de juego conmigo Y muy en especial, a Susana, mi fiel y leal compañera, y la luz que ilumina mi camino Agradecimientos En primer lugar, me gustaría agradecer a toda mi familia la comprensión y confianza que me han dado, una vez más, para poder concluir definitivamente esta etapa de mi vida. Sin su apoyo, no lo hubiera hecho. En segundo lugar, quiero agradecer a mis amigos Rafa y Carmen, su interés e insistencia para que llegara este momento. Por sus consejos y por su amistad, les debo mi gratitud. Por otra parte, quiero agradecer a mis compañeros asesores militares de Nextel Engineering sus explicaciones y sabios consejos, que sin duda han sido muy oportunos para escribir el capítulo cuarto de este trabajo. Del mismo modo, agradecer a Pepe Hevia, arquitecto de software de Alhambra Eidos, los buenos ratos compartidos alrrededor de nuestros viejos proyectos sobre XMPP y que encendieron prodigiosamente la mecha de este proyecto. A Jaime y a Bernardo, del Ministerio de Defensa, por haberme hecho descubrir las bondades de XMPP.
    [Show full text]
  • System Administration Guide for Cisco Unity Connection Release 7.X Revised May 2009
    System Administration Guide for Cisco Unity Connection Release 7.x Revised May 2009 Americas Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 527-0883 Text Part Number: OL-17017-01 THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS. THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY. The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California. NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE. IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
    [Show full text]
  • Cheat Sheet – Common Ports (PDF)
    COMMON PORTS packetlife.net TCP/UDP Port Numbers 7 Echo 554 RTSP 2745 Bagle.H 6891-6901 Windows Live 19 Chargen 546-547 DHCPv6 2967 Symantec AV 6970 Quicktime 20-21 FTP 560 rmonitor 3050 Interbase DB 7212 GhostSurf 22 SSH/SCP 563 NNTP over SSL 3074 XBOX Live 7648-7649 CU-SeeMe 23 Telnet 587 SMTP 3124 HTTP Proxy 8000 Internet Radio 25 SMTP 591 FileMaker 3127 MyDoom 8080 HTTP Proxy 42 WINS Replication 593 Microsoft DCOM 3128 HTTP Proxy 8086-8087 Kaspersky AV 43 WHOIS 631 Internet Printing 3222 GLBP 8118 Privoxy 49 TACACS 636 LDAP over SSL 3260 iSCSI Target 8200 VMware Server 53 DNS 639 MSDP (PIM) 3306 MySQL 8500 Adobe ColdFusion 67-68 DHCP/BOOTP 646 LDP (MPLS) 3389 Terminal Server 8767 TeamSpeak 69 TFTP 691 MS Exchange 3689 iTunes 8866 Bagle.B 70 Gopher 860 iSCSI 3690 Subversion 9100 HP JetDirect 79 Finger 873 rsync 3724 World of Warcraft 9101-9103 Bacula 80 HTTP 902 VMware Server 3784-3785 Ventrilo 9119 MXit 88 Kerberos 989-990 FTP over SSL 4333 mSQL 9800 WebDAV 102 MS Exchange 993 IMAP4 over SSL 4444 Blaster 9898 Dabber 110 POP3 995 POP3 over SSL 4664 Google Desktop 9988 Rbot/Spybot 113 Ident 1025 Microsoft RPC 4672 eMule 9999 Urchin 119 NNTP (Usenet) 1026-1029 Windows Messenger 4899 Radmin 10000 Webmin 123 NTP 1080 SOCKS Proxy 5000 UPnP 10000 BackupExec 135 Microsoft RPC 1080 MyDoom 5001 Slingbox 10113-10116 NetIQ 137-139 NetBIOS 1194 OpenVPN 5001 iperf 11371 OpenPGP 143 IMAP4 1214 Kazaa 5004-5005 RTP 12035-12036 Second Life 161-162 SNMP 1241 Nessus 5050 Yahoo! Messenger 12345 NetBus 177 XDMCP 1311 Dell OpenManage 5060 SIP 13720-13721
    [Show full text]
  • Instant Messaging
    Instant Messaging Internet Technologies and Applications Contents • Instant Messaging and Presence • Comparing popular IM systems – Microsoft MSN – AOL Instant Messenger – Yahoo! Messenger • Jabber, XMPP and Google Talk ITS 413 - Instant Messaging 2 Internet Messaging •Email – Asynchronous communication: user does not have to be online for message to be delivered (not instant messaging) • Newsgroups • Instant Messaging and Presence – UNIX included finger and talk • Finger: determine the presence (or status) of other users • Talk: text based instant chatting application – Internet Relay Chat (IRC) • Introduced in 1988 as group based, instant chatting service • Users join a chat room • Networks consist of servers connected together, and clients connect via a single server – ICQ (“I Seek You”) • Introduced in 1996, allowing chatting between users without joining chat room • In 1998 America Online (AOL) acquired ICQ and became most popular instant messaging application/network – AIM, Microsoft MSN, Yahoo! Messenger, Jabber, … • Initially, Microsoft and Yahoo! Created clients to connect with AIM servers • But restricted by AOL, and most IM networks were limited to specific clients • Only recently (1-2 years) have some IM networks opened to different clients ITS 413 - Instant Messaging 3 Instant Messaging and Presence • Instant Messaging – Synchronous communications: message is only sent to destination if recipient is willing to receive it at time it is sent •Presence – Provides information about the current status/presence of a user to other
    [Show full text]
  • Lincoln Murphy Presents... Traffic Hacking 43 Growth Hacking Tacitcs to Get Quality Prospects to Your B2B Saas Site
    Lincoln Murphy presents... Traffic Hacking 43 Growth Hacking tacitcs to get quality prospects to your B2B SaaS site Copyright© 2012 Lincoln Murphy. All Rights Reserved Five Rules Before We Get Started 1. Know what your audience is looking for, what problems they have or what opportunities they want to take advantage 2. Talk to your audience, not about your product... at least at first... WIIFT! 3. Know how your audience ‘consumes marketing’ and where they are on the awareness ladder 4. Know where your audience hangs out online, what publications/blogs they read, who they listen to and trust, etc. 5. Know the goal for the traffic you're getting! Traffic doesn't matter - customers matter. So get 'em to take action when they get to your site. Copyright© 2012 Lincoln Murphy. All Rights Reserved. Awareness Ladder Buy Now! 5. Convinced! 4. Benefits of Your Solution Free Trial 3. Your Solution 2. Solutions Exist Indoctrination 1. Problem 0. No Problem Copyright© 2012 Lincoln Murphy. All Rights Reserved. Traffic Hacking 43 Growth Hacking tacitcs to get quality prospects to your B2B SaaS site Copyright© 2012 Lincoln Murphy. All Rights Reserved. This is from an 85-minute presentation I did in 2012... if you’d like to watch the video of that presentation, you can here: http://sixteenventures.com/traffic-hacking Copyright© 2012 Lincoln Murphy. All Rights Reserved. Realistic Traffic Boost from These Tactics Do the Thing Copyright© 2012 Lincoln Murphy. All Rights Reserved. http://sixteenventures.com Potential Growth from these Tactics* Do the Thing Do the Thing Do the Thing Do the Do the Thing Thing *if you do things right and the stars align in your favor Copyright© 2012 Lincoln Murphy.
    [Show full text]
  • For Ipad® User Guide
    ® for iPad® User Guide 1 Table of Contents 3 Welcome to iMeet® for iPad® 4 Installing iMeet for iPad 5 Sign-In 6 Get to know iMeet on the iPad 8 Getting started 9 Manage contacts 10 Add iMeet Contacts 11 Start my meeting 12 Join a meeting 14 Get to know iMeet 15 iMeet main menu 16 Manage your profile 17 Invite guests to your meeting 18 Connect your audio 19 Meeting productivity 21 Support 2 Welcome to iMeet® for iPad®. Host or attend an iMeet meeting right from your iPad. The iPad app has all the key features and functionality of iMeet on the desktop, so you can meet anytime, with anyone around the world. Your favorite iMeet features are right at your fingertips: • Up to 15 people from anywhere in the world. • Easily host or join a meeting with a few simple taps. • High-quality, two-way video. • Invite guests by email or have iMeet call them. • See who’s talking. Their cube will glow green. • Want to get to know your guests a little better? Tap their cube, then spin to read their profile, view pictures, and download their contact card. • View screen share from the iPad. Don’t have an iMeet room yet to host your own meetings? Just visit iMeet.com to sign up today. Then you’re good to go. 3 Installing iMeet on your iPad. From your iPad 1. On your iPad home screen, tap the App Store icon. 2. In the Search bar, type “iMeet Mobile”. 3. Tap to install. From your computer 1.
    [Show full text]
  • XEP-0156: Discovering Alternative XMPP Connection Methods
    XEP-0156: Discovering Alternative XMPP Connection Methods Joe Hildebrand Peter Saint-Andre Lance Stout mailto:jhildebr@cisco:com mailto:xsf@stpeter:im mailto:lance@andyet:com xmpp:hildjj@jabber:org xmpp:peter@jabber:org xmpp:lance@lance:im http://stpeter:im/ 2020-07-07 Version 1.3.1 Status Type Short Name Draft Standards Track alt-connections This document defines an XMPP Extension Protocol for discovering alternative methods of connecting to an XMPP server using two ways: (1) DNS TXT Resource Record format; and (2) Web Host Metadata Link format. Legal Copyright This XMPP Extension Protocol is copyright © 1999 – 2020 by the XMPP Standards Foundation (XSF). Permissions Permission is hereby granted, free of charge, to any person obtaining a copy of this specification (the ”Specification”), to make use of the Specification without restriction, including without limitation the rights to implement the Specification in a software program, deploy the Specification in a network service, and copy, modify, merge, publish, translate, distribute, sublicense, or sell copies of the Specifi- cation, and to permit persons to whom the Specification is furnished to do so, subject to the condition that the foregoing copyright notice and this permission notice shall be included in all copies or sub- stantial portions of the Specification. Unless separate permission is granted, modified works that are redistributed shall not contain misleading information regarding the authors, title, number, or pub- lisher of the Specification, and shall not claim endorsement of the modified works by the authors, any organization or project to which the authors belong, or the XMPP Standards Foundation. Warranty ## NOTE WELL: This Specification is provided on an ”AS IS” BASIS, WITHOUT WARRANTIES OR CONDI- TIONS OF ANY KIND, express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE.
    [Show full text]
  • Protocol Filter Planning Worksheet, V7.X
    Protocol Filter Planning Worksheet Websense Web Security Solutions (v7.x) Protocol filter (name): Applies to (clients): In policy (name): At (time and days): Legend Action Bandwidth Permit Block Network Protocol (percentage) Protocol Name Action Log Bandwidth Database SQL Net P B N P % File Transfer FTP P B N P % Gopher P B N P % WAIS P B N P % YouSendIt P B N P % Instant Messaging / Chat AOL Instant Messenger or ICQ P B N P % Baidu Hi P B N P % Brosix P B N P % Camfrog P B N P % Chikka Messenger P B N P % Eyeball Chat P B N P % 1 © 2013 Websense, Inc. Protocol filter name: Protocol Name Action Log Bandwidth Gadu-Gadu P B N P % Gizmo Project P B N P % Globe 7 P B N P % Gmail Chat (WSG Only) P B N P % Goober Messenger P B N P % Gooble Talk P B N P % IMVU P B N P % IRC P B N P % iSpQ P B N P % Mail.Ru P B N P % Meetro P B N P % MSC Messenger P B N P % MSN Messenger P B N P % MySpaceIM P B N P % NateOn P B N P % Neos P B N P % Netease Popo P B N P % netFM Messenger P B N P % Nimbuzz P B N P % Palringo P B N P % Paltalk P B N P % SIMP (Jabber) P B N P % Tencent QQ P B N P % TryFast Messenger P B N P % VZOchat P B N P % Wavago P B N P % Protocol Filter Planning Worksheet 2 of 8 Protocol filter name: Protocol Name Action Log Bandwidth Wengo P B N P % Woize P B N P % X-IM P B N P % Xfire P B N P % Yahoo! Mail Chat P B N P % Yahoo! Messenger P B N P % Instant Messaging File Attachments P B N P % AOL Instant Messenger or ICQ P B N P % attachments MSN Messenger attachments P B N P % NateOn Messenger
    [Show full text]
  • Is Bob Sending Mixed Signals?
    Is Bob Sending Mixed Signals? Michael Schliep Ian Kariniemi Nicholas Hopper University of Minnesota University of Minnesota University of Minnesota [email protected] [email protected] [email protected] ABSTRACT Demand for end-to-end secure messaging has been growing rapidly and companies have responded by releasing applications that imple- ment end-to-end secure messaging protocols. Signal and protocols based on Signal dominate the secure messaging applications. In this work we analyze conversational security properties provided by the Signal Android application against a variety of real world ad- versaries. We identify vulnerabilities that allow the Signal server to learn the contents of attachments, undetectably re-order and drop messages, and add and drop participants from group conversations. We then perform proof-of-concept attacks against the application to demonstrate the practicality of these vulnerabilities, and suggest mitigations that can detect our attacks. The main conclusion of our work is that we need to consider more than confidentiality and integrity of messages when designing future protocols. We also stress that protocols must protect against compromised servers and at a minimum implement a trust but verify model. 1 INTRODUCTION (a) Alice’s view of the conversa-(b) Bob’s view of the conversa- Recently many software developers and companies have been inte- tion. tion. grating end-to-end encrypted messaging protocols into their chat applications. Some applications implement a proprietary protocol, Figure 1: Speaker inconsistency in a conversation. such as Apple iMessage [1]; others, such as Cryptocat [7], imple- ment XMPP OMEMO [17]; but most implement the Signal protocol or a protocol based on Signal, including Open Whisper Systems’ caching.
    [Show full text]
  • The Wainhouse Research Bulletin
    Volume 15 Issue #03 06-February-14 News & Views on Unified Communications & Collaboration Google Chromebox Alan D. Greenberg, [email protected] and the WR Analyst Team It’s getting crowded in the sub-$1,000 video Working with Asus, conferencing space. HP, and Dell for Just today Google has hardware, Vidyo and announced Chromebox for überconference for Meetings, priced at $999, software interop, and which includes an annual CDW and Synnex for services fee of $250 for distribution, the company the first year. The solution tested with the likes of effectively extends Google Costco, Eventbrite, Yelp, Hangouts video into small, and others with a big 6-8 person “huddle” meeting focus on two areas: ease rooms. The Chromebox of use and management. appliance is powered by an Asus is releasing its Intel Core i7 chip, sports version today, and HP both HDMI and Displayport and Dell are reportedly connectors, has 2x USB coming out soon 3.0 ports and 2x USB 2.0 with their respective ports, and connects to the Chromebox for Meetings. network via an Ethernet Google Chromebox Components port. The solution includes What WR thinks: This a 1080p-capable USB fixed lens camera with a Carl Zeiss announcement is big, big enough that we had a bunch lens, a wideband-capable mic & speaker “puck,” and an RF of analysts on the pre-release call and we confabbed remote with full QWERTY keypad in addition to mute, end afterwards — in Hangouts, of course. Not a bad video call, and volume buttons. experience. The services component, which can be renewed Google claims systems can be set up and configured in for $250 / year, includes regular software & security less than 10 minutes by non-IT types.
    [Show full text]