A Preliminary Analysis for Porting XML-Based Chat to MYSEA
Total Page:16
File Type:pdf, Size:1020Kb
View metadata, citation and similar papers at core.ac.uk brought to you by CORE provided by Calhoun, Institutional Archive of the Naval Postgraduate School Calhoun: The NPS Institutional Archive Theses and Dissertations Thesis Collection 2008-06 A preliminary analysis for porting XML-based chat to MYSEA LaVelle, Claire E. R. Monterey, California. Naval Postgraduate School http://hdl.handle.net/10945/4116 NAVAL POSTGRADUATE SCHOOL MONTEREY, CALIFORNIA THESIS A PRELIMINARY ANALYSIS FOR PORTING XML- BASED CHAT TO MYSEA by Claire E. R. LaVelle June 2008 Thesis Advisor: Cynthia E. Irvine Co-Advisor: Thuy D. Nguyen Approved for public release; distribution is unlimited THIS PAGE INTENTIONALLY LEFT BLANK REPORT DOCUMENTATION PAGE Form Approved OMB No. 0704-0188 Public reporting burden for this collection of information is estimated to average 1 hour per response, including the time for reviewing instruction, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing this burden, to Washington headquarters Services, Directorate for Information Operations and Reports, 1215 Jefferson Davis Highway, Suite 1204, Arlington, VA 22202-4302, and to the Office of Management and Budget, Paperwork Reduction Project (0704-0188) Washington DC 20503. 1. AGENCY USE ONLY (Leave blank) 2. REPORT DATE 3. REPORT TYPE AND DATES COVERED June 2008 Master’s Thesis 4. TITLE AND SUBTITLE : 5. FUNDING NUMBERS A Preliminary Analysis for Porting XML-based Chat to MYSEA 6. AUTHOR(S) Claire E. R. LaVelle 7. PERFORMING ORGANIZATION NAME(S) AND ADDRESS(ES) 8. PERFORMING ORGANIZATION Naval Postgraduate School REPORT NUMBER Monterey, CA 93943-5000 9. SPONSORING /MONITORING AGENCY NAME(S) AND ADDRESS(ES) 10. SPONSORING/MONITORING N/A AGENCY REPORT NUMBER 11. SUPPLEMENTARY NOTES The views expressed in this thesis are those of the author and do not reflect the official policy or position of the Department of Defense or the U.S. Government. 12a. DISTRIBUTION / AVAILABILITY STATEMENT 12b. DISTRIBUTION CODE Approved for public release; distribution is unlimited 13. ABSTRACT (maximum 200 words) The Monterey Security Architecture (MYSEA) is a distributed multilevel secure (MLS) computing environment. MYSEA does not presently support chat, an Internet application that provides near-real-time collaboration capability. Chat capability that implements the Extensible Messaging and Presence Protocol (XMPP) standards has been recognized by the Department of Defense (DoD) as a mandatory standard. The primary goal of this thesis is to determine if a chat server that implements the XMPP and the XMPP Instant Messaging (XMPP-IM) standards could be ported to MYSEA. To accomplish this goal, a set of selection criteria was developed and the open-source jabberd14 server was selected for this study. Its functionality was tested on different operating system environments (Fedora 7, RedHat 8, STOP OS 7 beta). This study also includes a functional analysis of the XMPP and XMPP-IM specifications, the related XMPP extensions supported by the jabberd14 server, a preliminary security analysis and a survey of the jabberd14 server code. The results of this project show that implementation of the XMPP jabberd14-1.6.0 server on the MYSEA platform under STOP 7 OS is feasible. The results also provide stepping stones toward a full-scale development effort to provide MLS-aware chat services in the MYSEA network. 14. SUBJECT TERMS Information assurance, MLS, Chat, XMPP, MYSEA, Jabber 15. NUMBER OF PAGES 145 16. PRICE CODE 17. SECURITY 18. SECURITY 19. SECURITY 20. LIMITATION OF CLASSIFICATION OF CLASSIFICATION OF THIS CLASSIFICATION OF ABSTRACT REPORT PAGE ABSTRACT Unclassified Unclassified Unclassified UU NSN 7540-01-280-5500 Standard Form 298 (Rev. 2-89) Prescribed by ANSI Std. 239-18 i THIS PAGE INTENTIONALLY LEFT BLANK ii Approved for public release; distribution is unlimited A PRELIMINARY ANALYSIS FOR PORTING XML-BASED CHAT TO MYSEA Claire E. R. LaVelle Civilian, Naval Postgraduate School M.A., Mills College, 2006 Submitted in partial fulfillment of the requirements for the degree of MASTER OF SCIENCE IN COMPUTER SCIENCE from the NAVAL POSTGRADUATE SCHOOL June 2008 Author: Claire E. R. LaVelle Approved by: Cynthia E. Irvine, Ph.D. Thesis Advisor Thuy D. Nguyen Co-Advisor Peter J. Denning, Ph.D. Chairman, Department of Computer Science iii THIS PAGE INTENTIONALLY LEFT BLANK iv ABSTRACT The Monterey Security Architecture (MYSEA) is a distributed multilevel secure (MLS) computing environment. MYSEA does not presently support chat, an Internet application that provides near-real-time collaboration capability. Chat capability that implements the Extensible Messaging and Presence Protocol (XMPP) standards has been recognized by the Department of Defense (DoD) as a mandatory standard. The primary goal of this thesis is to determine if a chat server that implements the XMPP and the XMPP Instant Messaging (XMPP-IM) standards could be ported to MYSEA. To accomplish this goal, a set of selection criteria was developed and the open- source jabberd14 server was selected for this study. Its functionality was tested on different operating system environments (Fedora 7, RedHat 8, STOP OS 7 beta). This study also includes a functional analysis of the XMPP and XMPP-IM specifications, the related XMPP extensions supported by the jabberd14 server, a preliminary security analysis and a survey of the jabberd14 server code. The results of this project show that implementation of the XMPP jabberd14-1.6.0 server on the MYSEA platform under STOP 7 OS is feasible. The results also provide stepping stones toward a full-scale development effort to provide MLS-aware chat services in the MYSEA network. v THIS PAGE INTENTIONALLY LEFT BLANK vi TABLE OF CONTENTS I. INTRODUCTION........................................................................................................1 A. MOTIVATION ................................................................................................1 B. PURPOSE OF STUDY....................................................................................1 C. ORGANIZATION OF THIS STUDY............................................................2 II. BACKGROUND ..........................................................................................................3 A. CHAT................................................................................................................3 B. EXTENSIBLE MESSAGING AND PRESENCE PROTOCOL (XMPP) ...........................................................................................................10 1. XMPP Server Responsibilities..........................................................11 2. XMPP Client Responsibilities...........................................................12 3. Security Issues ....................................................................................12 C. JABBER..........................................................................................................13 D. MONTEREY SECURITY ARCHITECTURE (MYSEA).........................14 E. XTS-400 ARCHITECTURE.........................................................................15 F. SUMMARY ....................................................................................................16 III. CHAT ENGINES SELECTION...............................................................................17 A. CHAT SERVERS...........................................................................................17 1. Selection Criteria for the Server.......................................................18 2. Outcome..............................................................................................23 B. CHAT CLIENTS ...........................................................................................23 1. Selection Criteria for the Clients......................................................23 2. Outcome..............................................................................................24 C. SUMMARY ....................................................................................................24 IV. EXPERIMENTATION .............................................................................................25 A. FUNCTIONALITIES OF THE JABBERD14 SERVER ...........................25 B. TESTING OVERVIEW ................................................................................28 1. Test Plan .............................................................................................29 C. REDHAT 8 PLATFORM .............................................................................34 1. Configuration Issues with the Server...............................................35 2. Installation of Jabber14-1.4.2 Server...............................................35 3. Testing of Jabber14-1.4.2 Server......................................................37 4. Summary for the RedHat 8 Platform...............................................37 D. FEDORA 7 PLATFORM..............................................................................37 1. Installation of Jabberd14-1.6.1.1 Server..........................................37 2. Testing of Jabberd14-1.6.1.1 Server.................................................38 3. Test Analysis.......................................................................................45 4. Summary for