GSoC/GCI Archive
Google Summer of Code 2012

PacketFence

Web Page: https://docs.google.com/document/pub?id=1SCJeF-3n3_jlxkjXVLUvOUu9PB2GGI0ONP5FzTvgZic&pli=1#h.j9sd1rpinsvo

Mailing List: https://lists.sourceforge.net/lists/listinfo/packetfence-devel

PacketFence is a Free and Open Source network access control (NAC) system. Boasting an impressive feature set including a captive-portal for registration and remediation, centralized wired and wireless management, 802.1X support, layer-2 isolation of problematic devices, integration with the Snort IDS and the Nessus or OpenVAS vulnerability scanners; PacketFence can be used to effectively secure networks - from small to very large heterogeneous networks.

Mainly developed in Perl with some PHP, Web (HTML/CSS/Javascript) and SQL, PacketFence leverages components from famous open source projects like Snort, Apache's HTTPD, Net-SNMP, FreeRADIUS, mod_perl, MySQL, DHCPd, Bind (named), OpenVAS and more.

Students interested in Network Security and Security tools in general should definitely take a look at our Ideas page.

Take a look at the code and fork it! https://github.com/inverse-inc/packetfence

Projects

  • Android-based application for devices autoconfiguration "Android-based application for devices autoconfiguration" idea is about providing automatically network connection. Networks which use 802.1x are generally hard for an end user to connect. Because the protocol itself supports a lot of encryption algorithms. For an end user it can be hard to configure it. For IOS based devices an aoutonomus system has already developed. Some settings and user credentials are put into an xml file called .mobiconfig. Using this file gives end user to connect a network, vpn connection, E-mail server settings, exchange settings, Ldap settings etc (https://developer.apple.com/library/ios/#featuredarticles/iPhoneConfigurationProfileRef/Introduction/Introduction.html). Using a .mobiconfig file for wifi connection provides a secure and simple configuration for users. PacketFence has already this feature. But there is no alternative to this technology in Android based devices. Aim of this project is about developing an Android application that gets .mobiconfig file and parse it, then the application makes configuration for wifi access according to this .mobiconfig file.
  • nmap integration as a scanning engine PacketFence currently integrates with the Nessus vulnerability scanner to verify the compliance of clients who requested network access. Nessus is no longer an open source and free tool so it cannot be bundled with PacketFence. Nmap would be a good candidate to replace Nessus thanks to its scripting engine and the availability of perl bindings.