wiki:KrakenBook
Last modified 15 months ago

Kraken Book

Table of Content

Part 0: Introduction

  • Introduction
    • Target Audience
    • Motivation
    • History and Future
  • Background Concepts
    • Subversion
      • Source Repository
    • Maven
      • POM: Project Object Model
      • Repository Directory Layout
      • Build, Install and Deploy
      • Eclipse Integration
      • One jar packaging
    • OSGi
      • History
      • Core Concepts: Bundle, Service, Package Management
      • How ClassLoader works in OSGi world
      • Programming Model
        • Extender Design Pattern
      • Manifest Configuration
      • maven-bundle-plugin (BND)
        • How to wrap ordinary jar file
        • Reflection and Dynamic Instrumentation issue
      • OSGi Compendium
        • PreferencesService for simple configuration
    • iPOJO
      • Component and Handler Concepts
      • iPOJO Annotations
      • maven-ipojo-plugin

Part 1: Application Server and Infrastructures

  • Kraken Core
    • Security Platform Approach
      • Seamless integration, Unified experience
    • Installation
      • Download Windows Installer
    • Basic Commands
      • Boot and Shutdown
        • Default Login (telnet/ssh) Method
        • Signal Support
        • Automatic Bootstrap
      • Bundle Management
        • Remote install using Maven Repository
        • Local install
      • Package Management
        • Kraken Packaging System
        • Package Descriptor Syntax
      • Centralized Logging
      • Thread Control
      • Performance Monitoring
      • Keystore Management
      • Heap Dump and Memory-leak Debugging
    • Hello world!
      • Project Initialization (using kraken-template archetype)
      • Script Implementation
      • Build and Bundle Install
      • Modify and Bundle Update
      • Deploy
  • Kraken iPOJO
    • Component Diagnosis
    • Real World Troubleshooting
  • Kraken JPA
    • ORM Basic Concept
      • O/R mismatch
    • JPA annotations
      • @Entity, @Table, @ManyToOne, @OneToMany, @ManyToMany
    • JPQL (JPA Query Language)
    • Declarative Transaction Support
    • Commands
    • Tutorial
      • POM configuration
      • Define Entity
      • classes and config
      • How to override default JPA (database) config
  • Kraken Message Bus
    • Pluggable Business Logic
    • Define Plugin
      • @MsgbusPlugin and @MsgbusMethod
      • Request, Response, and Session
      • Serialization Consideration
        • nesting data types
        • date format
    • Implementation Details
      • MsgbusHandler
  • Kraken DOM (from server-side watchcat)
    • Common Domain Object Model
      • organization, admin, role, permission, area, host, application, vulnerability, and so on.
    • Common API
      • with entity persistence event (created/deleted/updated)
  • Kraken Web Console
    • HTML5 and Web socket
    • Message Exchange Pattern
      • request, response, trap (fire-and-forgot)
    • Protocol
    • Webconsole Extender
    • Static Resource Handling
    • Commands
    • Developer Console
    • Chat Tutorial
  • Kraken Cron
    • Crontab Format
    • Commands
    • Programmable API
    • Annotations
      • @PeriodicJob, @HourlyJob, @DailyJob, @MonthlyJob
    • Tutorial
  • Kraken HTTP
    • Jetty Introduction
    • Commands
      • File Server usage
    • Dynamic Servlet and Filter management
      • Access control filter example
    • Declarative Servlets
      • JSON Servlet and @JsonHttpMethod
      • XML Servlet and @XmlHttpMethod
      • Text Servlet and @TextHttpMethod
      • Csv Servlet and @CsvHttpMethod
  • Kraken XMLRPC
    • Commands
    • Declarative XMLRPC
  • Kraken RPC

Part 2: Low-level Networking

For network forensics and live detection

  • Kraken PCAP
  • Kraken HTTP Decoder
  • Kraken NETBIOS Decoder
  • Kraken SMB Decoder
  • Kraken DCERPC Decoder
  • Kraken MSN Decoder
  • Kraken FTP Decoder
  • Kraken SMTP Decoder
  • Kraken POP3 Decoder
  • Kraken SNMP Decoder
  • Kraken DHCP Decoder

General Networking

  • Kraken DNS
  • Kraken TFTP
  • Kraken Syslog
  • Kraken SNMP
  • Kraken Proxy

Part 3: Detector, Analyzer, and Unified Management

Detector and Rules

  • Sonar
  • ARP Watch
  • Malware Domain
  • Google Secure Browsing
  • HTTP Detector
  • Aho-Corasick pattern matcher
  • Fast-flux Monitor
  • DHCP Fingerprinting

Log Management

  • Kraken SIEM
  • Kraken Btree
  • Kraken Logstorage
  • Kraken Sentry
  • Kraken Base
  • Kraken RRD
  • Kraken GeoIP

Advanced Scripting

  • Kraken Jython