cybergreen-net / www.cybergreen.net Goto Github PK

We want to track downloads for PDF files on mitigation/ and mitigation/asean/ pages on http://www.cybergreen.net

Acceptance criteria

• Use google analytics to track clicks on the download links (User will not need to enter any contact information)
• all 4 files are tracked on both of pages

Tasks

• add goole analytics
• add JS code for tracking downloads on mitigation/ and mitigation/asean/ appropriate pages

Useful reading https://support.google.com/analytics/answer/1136920?hl=en

Which terminology should be favoured?

See this drawing

• Short paragraph at top with description of what inventory is about
  • @aaronkaplan or @ataslim: can you provide this
• Other layout changes - see diagram

Part of #44

We want to add and an explanation of key fields e.g. Format, Taxonomy etc (could be hover, could be a key section ...)

As a CERT (??) I want to be able search the data sources shown in the data inventory to only show the ones i am interested in.

Tasks

Implement in JS ...

• free text search with text matching against the title of the risk (regex or simple match?)
  • perform search on each keyup (live interaction)
• filters for each of the metadata fields (e.g. format, public etc)
  • be able to reset
  • prepopulate drop-downs with list of potential values (requires us to load the data sources into JS and have a list of them)
• show number of items in results

Additionally:

• Additional design / ux improvements

Following the instructions from README:
gem install jekyll and jekyll serve --watch getting the error

Dependency Error: Yikes! It looks like you don't have jekyll-redirect-from or one of its dependencies
installed. In order to use Jekyll as currently configured, you'll need to install this gem. The full error 
message from Ruby is: 'cannot load such file -- jekyll-redirect-from' If you run into trouble, you can find 
helpful resources at http://jekyllrb.com/help/! 
jekyll 3.3.1 | Error:  jekyll-redirect-from

Fixed with gem install jekyll-redirect-from
We need to include this in README

A CSV of the data sources/feeds should be added to the _data directory

A list of sources/feeds is available on the front page

Hi folks!

the map is actually quite funny. We are completely missing Greenland on the map.
Please change the map.

(PS: same with Antarctica and the Arctic)

@aaronkaplan the datapackage.json is now there:

https://github.com/cybergreen-net/inventory.cybergreen.net/blob/gh-pages/_data/datapackage.json

Each field (column) in the CSV has entry in the fields list e.g.:

      {
        "name": "Taxonomy",
        "type": "string",
        "title": "",
        "description": ""
      },

Can you edit to:

• add a title: this is optional as we already have the name. This would be appropriate where you want a slightly more useful label for the field in the UI e.g. File Format (title) vs Format (name). Just leave the title blank where you have nothing.
• add a description of the field explaining what it is. You can use markdown if you want. We will then use these descriptions when building the inventory page 😄

NOTE: we do not necessarily need a description for every field if you think some don't need that. However, I think even obvious ones like the Title field could benefit from a short description IMO 😄

We are using a standard jekyll + github setup. This is generally best documented e.g.:

• Jekyll docs:
  • https://jekyllrb.com/
  • https://jekyllrb.com/docs/posts/ - for how to write a post
• Most of the content is written in markdown with some HTML
  • Markdown: http://opendatahandbook.org/contribute/markdown-examples/
  • Also just google!
• Editing files online on github: https://help.github.com/articles/editing-files-in-your-repository/
  • You can download the site and can edit locally: follow the instructions in the README here

General good documentation for how this setup works for a similar style site:

• http://opendatahandbook.org/contribute/

@rgrp Yurie has a new SSL certificate for the website. She needs to send encrypted with a PGP key. Can you get in touch with her to get her that information if you have it?

currently Installation guide says:

# Clone the repository
git clone https://github.com/cybergreen-net/inventory.cybergreen.net.git
# Navigate to the repository directory
cd inventory.cybergreen.net/

Needs to be updated as name of repo has been changed to www,cybergreen.net.
So it should say

# Clone the repository
git clone https://github.com/cybergreen-net/www.cybergreen.net.git
# Navigate to the repository directory
cd www.cybergreen.net/

Create datapackage.json in _data directory with resource entry for sources.csv CSV file that is already in that directory.

Part of #44

• This uses jekyll and github pages (can point to docs for this)
• Basic commands for getting started e.g. install ruby + jekyll, then run jekyll. Explain that we deploy on github pages

This committed post will not show up on the site for some reason:

http://www.cybergreen.net/_posts/2017-06-02-Chairman-Paul-Twomey-Addresses-Market-Failures-in-Cybersecurity-at-the-T20-Global-Solutions-Summit

I have a call with CERT LV and CERT LV where they will give me feed back on the first mock up
Once the call is done I will write a summery of what came up and do alteration from the mock up from their insight

Roll mouse over "Mitigation" on http://www.cybergreen.net, then do it again from http://www.cybergreen.net/what-we-do/ to see what I mean.

Need to show if Cybergreen use it with a star and do more reflection

Not sure needed right now as we will have not many feeds

Users should be able to filter and search the source/feed list on the front page.

Which facets should be filterable?

• Create user stories.
• Mock up how page should look like.

supporter: shuttleworth foundation might be a copy & paste leftover.

Upate sources.csv with correct list of data sources for this first release.

(Split out from #3)

Note: this is a super issue and we will create subissues for relevant items

• Add an explanation of key fields e.g. Format, Taxonomy etc (could be hover, could be a key section ...)
  • Create a datapackage.json #45
  • Add a detailed description of each field to datapackage.json @aaronkaplan #47
  • Use that information in the web page @shiweiart #18
• Lots of UX improvements (see this drawing) #48
  • Add a short explanatory description of what the data inventory is ...
• Show more fields (e.g. the ones @aaronkaplan selected) (not in original SoW)
• Add new field to indicate whether this is being used in cybergreen platform (and show this) #54
• Decide on source vs feed nomenclature finally - #2 ANS: sources
• Display an "add a new data source" link on the main inventory page
• Download button to download entire dataset (link to github directory or directly to CSV and DataPackage.json)
• Rename page to Data Source Catalog

Won't do - for future

• Add individual pages for data sources e.g. /data-inventory/{source-id}/ (? not sure - do we need this)
  • Why? This would allow to link to individual sources by url - e.g. from stats site. Alternative is just to have a href in the page
  • We could also allow people to "edit" this data

Specific Client Requirements

• Get full descriptions for key fields and display [on the inventory page]
• Visually mark which data sources CG is currently processing

User Stories

As a CERT I want to see what data sources are available so that I can request them and use them in my own work

• I want to filter by particular risk types
• Taxonomy?
• What data can I get easily (e.g. publicly available or available to CERTs)

As a CERT I want to see what data sources are used in the CG stats portal so I understand what is available so that … ?? [i go visit]

As a User of the Stats portal I want to see what data is being used to build the portal so that … ??? [i know it is good quality, how detailed it is ??]

Nice list. We have started a new malware threat feed (REScure) which is accessible at :

homepage : https://rescure.me/
Feedpath : https://rescure.me/rescure_blacklist.txt
Feedpath : https://rescure.me/rescure_domain_blacklist.txt

The feed is curated form an inhouse threat intelligence solution and is updated at every 6 hours. A blogpost detailing about this is mentioned here :

https://www.theprohack.com/2018/09/rescure-cyber-threat-intelligence-feed.html

Currently limited to only malicious IPs and domains, we will enhance this by adding IoCs such as malware hashes, et al in future.

Thanks !

Headshot attached here. Please crop from her chest up, and upload to front page (center circle) and "Who We Are" page.

• Design changes to css (download html and modify locally as designer will struggle to install a nodejs app ;-) ...)
• Reintegrate these changes

@aaronkaplan i think this is because they are wrong in the spreadsheet. The homepage column must contain a pure URL. If you want titles put them in the Title or Owner column ;-)

/cc @motok

Implementing resolves of #60
See mock ups in https://drive.google.com/open?id=0B7ucLyXmP0n2bWFoaTVCWjFPZXc

Please change the inventory.cybergreen.net project page and add the info from the following columns to the main page:

• Title
• Owner
• Homepage
• Taxonomy
• Description
• Format
• Public (use an icon if public or not public)
• Relevance
• Link to a more detailed page describing all the fields (separate sub-page per feed)

Notice that fonts are loading over http which causes issues on https

Simple instructions for editing the CSV (on github or off) with fallback to opening an issue on this repo.

Could draw inspiration from: http://okfnlabs.org/projects/add/

@GregoryRhysEvans can you take a look at this

Move metrics page under /data here on main website

Create a stub front page, potentially reusing the open data handbook theme used on the stats site.

inventory.cybergreen.net works!

Want to set up DNS to point that subdomain to cybergreen-net.github.io and we add CNAME here and deploy gh-pages

@aaronkaplan can you take a look at this one (esp set up of DNS).

Decide which fields should be included in the CSV

Here is the current feed list and fields

Please make a stacked graph of how the different risks add up to the global DDOS potential
(please take the AF count columns for this)

Go to the countries page. Type in "United Kingdom".
Observe that when typing in "United" you will dynamically see the UK in the list.
But when typing in "United Kingdom" you won't see it anymore. Seems the space breaks the search.