MongoDB, ANTS, and the IC A Technological Love Story
Overview• The State of the Cyber World• The Intelligence Community (IC), Challenges, and the Mongo solution• An Idea• ANTS - A Product• Moving Forward
Current State of the Cyber World"...During the past year, there have been 200attacks on core critical infrastructures in thetransportation, energy, and communicationindustries reported to the Department ofHomeland Security..."- Sen. Susan Collins, R-Maine, and rankingmember of the Senate Homeland Security andGovernmental Affairs Committee.
Current State Continued...Over the next few years, hackers will become moresophisticated, said Charles Croom, vice presidentof cyber security solutions at Lockheed MartinInformation Systems & Global Solutions. Thisdoesn’t necessarily mean that the technologies arebecoming more advanced — even the mostsophisticated threats often use knownvulnerabilities and malware, Croom said — but theadversaries have become more effective. -National Defense Magazine
Current State Continued...• Cyber threats get personal ✴ Mobile Malware ✴ Medical Identity Theft ✴ Ransom Malware ✴ Hacktivism
The IC Mission Primary Mission: "...to collect and convey the essentialinformation the President and members of policymaking, law enforcement, and military communities require to execute their appointed duties." (intelligence.gov)
Mission, Continued...• Members of the IC: ✴ Collect and Assess intel on ✦ International Terrorists ✦ Narcotics activities ✦ Hostile Activities: ✤ Foreign powers, organizations, persons, and their agents ✤ Foreign intelligence directed against US
Our Challenges• Data is BIG• Data is unstructured• Data is constantly evolving and changing• Technologies are evolving and changing
The Social NetworkAll generating data!All communicating data!The data is sensitive!
Scale of the ICHighly distributed!All collecting data!All enhancing data!All transforming data!All sharing data!
Evolve to Adapt• How do we keep up with the Data Explosion and the need to bring something to market tomorrow?• How can we react quickly by adapting to evolving data and threats?• Useful data gets the most attention, how can we make it more accessible? MongoDB is a Perfect Fit!
Why Mongo in the IC?• Distributed and scalable• Easy to stand up• Deals well with unstructured data• Technology stack friendly• Cheap and accessible! We love MONGO
The Birth of an Idea• Network Traffic Generation: ✴ Not a PCAP hose ✴ Organic generation ✴ Scripted Actions for organized and planned activity ✴ Interactivity
Retrospective• Needs? ✴Stability ✴Quick time to market ✴Flexible data model ✴Scalable infrastructure• Options?
RDBMS vs MongoDBSQL RDBMS Solutions MongoDBSchema is rigid, inflexible, Fits very well for volatilehigh maintenance dataLearning curve of the Simple to implement andrelational model and design easy to useDifficult to scale out with Easy to scale out, automatichigh availability sharding, distributing data over multiple nodes, with high availabilityHigh cost of proprietary Low cost, open sourcehardware and software software, commodity based hardwareCauses major interruptions Rapid development cyclesto rapid development cycles AND programmer friendly
Why Mongo for our Product?• Minimal cost for capability coverage• Plays nicely with other technologies• Standalone stable• Short learning curve• Quick time to market/rapid prototyping
How ANTS benefits from Mongo• Currently supported actions: ✴ HTTP GET’s & POST’s ✴ Chat Send & Response ✴ Email Send & Response• Where does MongoDB fit in? ✴ Enables easy evolution ✴ Addition of new action types ✴ Future friendly
Success• Four (4) successful version updates in the six (6) months!• Recently got buy in for our 2.0 expansions and GUI facelift from current client• Expanding into new spaces with new clients• Our current client is VERY happy
ANTS 2.0!• Two major components ✴ Action scheduling feature ✴ Upgraded GUI• Opportunity to learn from client feedback and improve on multiple levels
New Features• Advanced Scheduling Features• Google Calendar-like feel and scheduling• Timeline view• Intuitive workflow• Seamless integration
Future of ANTS• Actors: ✴ Dynamic and automated creation ✴ easily scalable• Actions ✴ SIP/VOIP ✴ Email attachments and execution ✴ Social Network interaction• Scripts ✴ Auto-generated scripts based on Actors, Actions, and duration
Match Made in Heaven• Mongo really has everything we needed: ✴ Quick time to market ✴ How long to develop your initial prototype ✴ Learning curve and developer ease of use ✴ Stack flexible ✴ Data flexible ✴ Stability