Enterprise Online Help for GCCS-J and JC2CUI: An example of Enterprise Software Engineering. 2 April Ross Adjei Mike Nguyen

Transcription

1 Enterprise Online Help for GCCS-J and JC2CUI: An example of Enterprise Software Engineering 2 April 2014 Ross Adjei Mike Nguyen

2 Agenda Background Architecture Implementation/Demo Performance Challenges Where are we now? Q & A 2

3 Background

4 Background Online help exists as part of the Defense Information Systems Agency (DISA) Global Command & Control Systems - Joint (GCCS-J) DISA is modernizing GCCS-J systems and capabilities and looking to reduce costs so our team is providing an Enterprise-level deployment of Online Help to meet these goals Alleviates the need for local deployment of a help server for each GCCS-J enclave (54 critical sites) Leverages mature and proven open source software components BaseX, Apache Tomcat, etc. Will support existing GCCS-J systems first Designed to have ZERO impact to developers, MINIMAL impact to content developers Can support Joint Command & Control Common User Interface (JC2CUI) and Agile Client, as well as additional DISA programs that wish to take advantage of EHELP 4

5 Background (cont.) Requirements: Support user online help access via Jobs Tree, Table of Contents, context-sensitive help, or keyword search XML schema provided to developers; schema provides uniform look and feel for content, as well as ability to display data from a number of access points Provide ability to categorize online help in the database by system For example, a CENTCOM GCCS-J system online help can be separated from a PACOM GCCS-J system s online help Done via ehelp Domains Provide system administrator functions, access control Current GCCS-J online help has no access control Allow admins to create domains, upload content, backup/restore data Provide controls for DISA DAA/DIACAP SIPR accreditation ehelp is intended for the SIPR network; however, the content it contains is largely Unclassified 5

6 Architecture

7 Architecture Help Enclave (DECC) Web Server (VM) Accreditation Boundary Apache HTTPD mod-proxy Help Server (VM) Accreditation Boundary Apache Tomcat Enterprise Help System Application BaseX Database Red Hat Enterprise Linux Red Hat Enterprise Linux 7

8 Architecture (cont.) Help Enclave (DECC) Web Server Apache HTTPD mod-proxy SSL Help Server Apache Tomcat Tomcat Enterprise Help System Application Existing JC2CUI Enclave HTTPS Existing GCCS-J Enclave Client Workstation Widget Server I 3 App Server Client Workstation JC2CUI User Apache Tomcat Oracle WebLogic GCCS-J User Web Browser Help Widget HTTPS HTTPS Widget Packages Enterprise- Help-Proxy Existing-App Requiring-Help Enterprise- Help-Proxy HTTPS HTTPS Web Browser Help Web App 8

9 Architecture (cont.) Admin Access Username and Password authentication Admin capabilities Account Management Domain management Archive Management User Access Anonymous access is allowed for users 9

10 Implementation/Demo

11 Performance

12 Performance Number of concurrent users 12 Average response time in seconds

13 Challenges

14 Challenges 14 Meeting strict Information Assurance (IA) controls ASD STIG, DB STIG as guidance OWASP a good resource for implementation guidelines Static code analysis tools (Sonar, Fortify, Coverity) can help Many differences among potential systems using ehelp OS, Web Servers, etc. Different platforms require creative architecture Access/Authorization control GCCS-J not yet using PKI, JC2CUI using PKI ehelp can implement a more stringent (user-based) access control method once the systems are aligned Security controls, restrictions Ports, protocols, communication mechanisms, etc. Schedules Each system (GCCS-J, JC2CUI, even ehelp) following different schedules for development, test, etc.

15 Where are we now?

16 Where are we now? ehelp is about to support GCCS-J test events, for operational release in the fall of 2014 Moving forward Support for Public-Key Infrastructure (PKI) certificates Clustering/Load balancing 16

17 Q & A

18 Backup

19 19 Enterprise Help Admin Login

20 20 Enterprise Help Account Manager

21 21 Create Domain

22 Enterprise Help Domain Domain name and description 22

23 23 Enterprise Help Domain

24 Enterprise Help Domain The list of documents that are uploaded successfully 24

25 Enterprise Help Archive The archive view The documents view 25

26 26 Enterprise Help Archive

27 27 Enterprise Help Archive

28 Enterprise Help Keyword Search User runs a keyword search for Coastal Defense 28

29 29 Enterprise Help Search Results

30 30 Enterprise Help System Index

31 31 Enterprise Help Viewer

32 32 Enterprise Help Training Videos

33 33 Enterprise Help Training Videos

34 Acronyms 34 ASD CENTCOM DAA DB DECC DIACAP DISA DMI DMICL DMISVR DTD EHELP GCCS-J HTTP HTTPD HTTPS IA I3 JC2CUI OWASP PACOM PDF PKI RAM RHEL SIPR SSL STIG VM XML Application Security & Development United States Central Command Designated Approving Authority Database Defense Enterprise Computing Center Defense Information Assurance Certification and Accreditation Process Defense Information Systems Agency Document Management Infrastructure Document Management Infrastructure Client Document Management Infrastructure Server Document Type Definition Enterprise Online Help Global Command & Control System - Joint Hypertext Transfer Protocol Hypertext Transfer Protocol Daemon Hypertext Transfer Protocol Secure Information Assurance Integrated Imagery & Intelligence Joint Command & Control Common User Interface Open Web Application Security Project United States Pacific Command Portable Document Format Public-Key Infrastructure Random-Access Memory Red Hat Enterprise Linux Secret Internet Protocol Router Secure Sockets Layer Security Technical Implementation Guide Virtual Machine Extensible Markup Language

35

36 Q & A